{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "A new version of Red Hat build of Ceph Storage has been released",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The Red Hat Storage Ceph container images are based on the latest ubi9 base image and Ceph 9.0.\nThis release updates to the latest version.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:26411",
        "url": "https://access.redhat.com/errata/RHSA-2026:26411"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2024-55565",
        "url": "https://access.redhat.com/security/cve/CVE-2024-55565"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-47913",
        "url": "https://access.redhat.com/security/cve/CVE-2025-47913"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-47914",
        "url": "https://access.redhat.com/security/cve/CVE-2025-47914"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-58181",
        "url": "https://access.redhat.com/security/cve/CVE-2025-58181"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-59343",
        "url": "https://access.redhat.com/security/cve/CVE-2025-59343"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-64718",
        "url": "https://access.redhat.com/security/cve/CVE-2025-64718"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-64756",
        "url": "https://access.redhat.com/security/cve/CVE-2025-64756"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/red_hat_ceph_storage/",
        "url": "https://docs.redhat.com/en/documentation/red_hat_ceph_storage/"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_26411.json"
      }
    ],
    "title": "Red Hat Security Advisory: New container image: rhceph-9.0",
    "tracking": {
      "current_release_date": "2026-06-27T14:39:24+00:00",
      "generator": {
        "date": "2026-06-27T14:39:24+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.2.6"
        }
      },
      "id": "RHSA-2026:26411",
      "initial_release_date": "2026-06-16T16:32:52+00:00",
      "revision_history": [
        {
          "date": "2026-06-16T16:32:52+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-06-16T16:33:01+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-06-27T14:39:24+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Ceph Storage 9.0",
                "product": {
                  "name": "Red Hat Ceph Storage 9.0",
                  "product_id": "Red Hat Ceph Storage 9.0",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:ceph_storage:9.0::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Ceph Storage"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/alloy-rhel10@sha256:b839e918e2b695ee22e954273f016c6ecdebc1f6048e538560b7162f21f9b83a_amd64",
                "product": {
                  "name": "registry.redhat.io/rhceph/alloy-rhel10@sha256:b839e918e2b695ee22e954273f016c6ecdebc1f6048e538560b7162f21f9b83a_amd64",
                  "product_id": "registry.redhat.io/rhceph/alloy-rhel10@sha256:b839e918e2b695ee22e954273f016c6ecdebc1f6048e538560b7162f21f9b83a_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/alloy-rhel10@sha256%3Ab839e918e2b695ee22e954273f016c6ecdebc1f6048e538560b7162f21f9b83a?arch=amd64\u0026repository_url=registry.redhat.io/rhceph/alloy-rhel10\u0026tag=1781021746"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/grafana-rhel10@sha256:b413d37ad30595df599c3aa8c7dbfad08acc6fa9a59e5300d6e66746d0ed7c92_amd64",
                "product": {
                  "name": "registry.redhat.io/rhceph/grafana-rhel10@sha256:b413d37ad30595df599c3aa8c7dbfad08acc6fa9a59e5300d6e66746d0ed7c92_amd64",
                  "product_id": "registry.redhat.io/rhceph/grafana-rhel10@sha256:b413d37ad30595df599c3aa8c7dbfad08acc6fa9a59e5300d6e66746d0ed7c92_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/grafana-rhel10@sha256%3Ab413d37ad30595df599c3aa8c7dbfad08acc6fa9a59e5300d6e66746d0ed7c92?arch=amd64\u0026repository_url=registry.redhat.io/rhceph/grafana-rhel10\u0026tag=1781018768"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:f58c4b24482819abd2cb67f30d3e1034d61dd85a043f76bc3f487e48941bd201_amd64",
                "product": {
                  "name": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:f58c4b24482819abd2cb67f30d3e1034d61dd85a043f76bc3f487e48941bd201_amd64",
                  "product_id": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:f58c4b24482819abd2cb67f30d3e1034d61dd85a043f76bc3f487e48941bd201_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhceph-haproxy-rhel9@sha256%3Af58c4b24482819abd2cb67f30d3e1034d61dd85a043f76bc3f487e48941bd201?arch=amd64\u0026repository_url=registry.redhat.io/rhceph/rhceph-haproxy-rhel9\u0026tag=1781021473"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/keepalived-rhel10@sha256:a214782e432451ca21a5042abd90bf44c57ed01563dfa4d1b81ef72f38ef2265_amd64",
                "product": {
                  "name": "registry.redhat.io/rhceph/keepalived-rhel10@sha256:a214782e432451ca21a5042abd90bf44c57ed01563dfa4d1b81ef72f38ef2265_amd64",
                  "product_id": "registry.redhat.io/rhceph/keepalived-rhel10@sha256:a214782e432451ca21a5042abd90bf44c57ed01563dfa4d1b81ef72f38ef2265_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keepalived-rhel10@sha256%3Aa214782e432451ca21a5042abd90bf44c57ed01563dfa4d1b81ef72f38ef2265?arch=amd64\u0026repository_url=registry.redhat.io/rhceph/keepalived-rhel10\u0026tag=1781018336"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:09758d53ef928e8740a95a31572462681a0f70c1c2a6eaa6a72a45fddf4538b7_amd64",
                "product": {
                  "name": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:09758d53ef928e8740a95a31572462681a0f70c1c2a6eaa6a72a45fddf4538b7_amd64",
                  "product_id": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:09758d53ef928e8740a95a31572462681a0f70c1c2a6eaa6a72a45fddf4538b7_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oauth2-proxy-rhel9@sha256%3A09758d53ef928e8740a95a31572462681a0f70c1c2a6eaa6a72a45fddf4538b7?arch=amd64\u0026repository_url=registry.redhat.io/rhceph/oauth2-proxy-rhel9\u0026tag=1781018431"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:fa557386c42c9144dcef16957fc0f02b6e631d037cb982c70a043ce11d760556_amd64",
                "product": {
                  "name": "registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:fa557386c42c9144dcef16957fc0f02b6e631d037cb982c70a043ce11d760556_amd64",
                  "product_id": "registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:fa557386c42c9144dcef16957fc0f02b6e631d037cb982c70a043ce11d760556_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhceph-9-rhel9@sha256%3Afa557386c42c9144dcef16957fc0f02b6e631d037cb982c70a043ce11d760556?arch=amd64\u0026repository_url=registry.redhat.io/rhceph/rhceph-9-rhel9\u0026tag=1781160401"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:e40d93d9d76fe8aa344905015d75ae13f94622f6e64de432b73af1930136f8de_amd64",
                "product": {
                  "name": "registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:e40d93d9d76fe8aa344905015d75ae13f94622f6e64de432b73af1930136f8de_amd64",
                  "product_id": "registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:e40d93d9d76fe8aa344905015d75ae13f94622f6e64de432b73af1930136f8de_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/snmp-notifier-rhel10@sha256%3Ae40d93d9d76fe8aa344905015d75ae13f94622f6e64de432b73af1930136f8de?arch=amd64\u0026repository_url=registry.redhat.io/rhceph/snmp-notifier-rhel10\u0026tag=1781017635"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/alloy-rhel10@sha256:6cc5bc1fe92aecfb16bb3b6ccf833d06dc4484f8f7c9ffb7bedc3b3e49ace7b6_arm64",
                "product": {
                  "name": "registry.redhat.io/rhceph/alloy-rhel10@sha256:6cc5bc1fe92aecfb16bb3b6ccf833d06dc4484f8f7c9ffb7bedc3b3e49ace7b6_arm64",
                  "product_id": "registry.redhat.io/rhceph/alloy-rhel10@sha256:6cc5bc1fe92aecfb16bb3b6ccf833d06dc4484f8f7c9ffb7bedc3b3e49ace7b6_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/alloy-rhel10@sha256%3A6cc5bc1fe92aecfb16bb3b6ccf833d06dc4484f8f7c9ffb7bedc3b3e49ace7b6?arch=arm64\u0026repository_url=registry.redhat.io/rhceph/alloy-rhel10\u0026tag=1781021746"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/grafana-rhel10@sha256:10d6f4417f63579b5ad0c2642e68049bf4b0cbc07393f05f5ccd6d93ad9b4551_arm64",
                "product": {
                  "name": "registry.redhat.io/rhceph/grafana-rhel10@sha256:10d6f4417f63579b5ad0c2642e68049bf4b0cbc07393f05f5ccd6d93ad9b4551_arm64",
                  "product_id": "registry.redhat.io/rhceph/grafana-rhel10@sha256:10d6f4417f63579b5ad0c2642e68049bf4b0cbc07393f05f5ccd6d93ad9b4551_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/grafana-rhel10@sha256%3A10d6f4417f63579b5ad0c2642e68049bf4b0cbc07393f05f5ccd6d93ad9b4551?arch=arm64\u0026repository_url=registry.redhat.io/rhceph/grafana-rhel10\u0026tag=1781018768"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:10ed1c8ea558924ddfa1d3ab6a43d34a6edd16e09dac44d593487bc22b2fc7fc_arm64",
                "product": {
                  "name": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:10ed1c8ea558924ddfa1d3ab6a43d34a6edd16e09dac44d593487bc22b2fc7fc_arm64",
                  "product_id": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:10ed1c8ea558924ddfa1d3ab6a43d34a6edd16e09dac44d593487bc22b2fc7fc_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhceph-haproxy-rhel9@sha256%3A10ed1c8ea558924ddfa1d3ab6a43d34a6edd16e09dac44d593487bc22b2fc7fc?arch=arm64\u0026repository_url=registry.redhat.io/rhceph/rhceph-haproxy-rhel9\u0026tag=1781021473"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/keepalived-rhel10@sha256:5b0ca20174d1c6cdb3229bf625a906acf64509575c3092895e341ec301c5e92e_arm64",
                "product": {
                  "name": "registry.redhat.io/rhceph/keepalived-rhel10@sha256:5b0ca20174d1c6cdb3229bf625a906acf64509575c3092895e341ec301c5e92e_arm64",
                  "product_id": "registry.redhat.io/rhceph/keepalived-rhel10@sha256:5b0ca20174d1c6cdb3229bf625a906acf64509575c3092895e341ec301c5e92e_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keepalived-rhel10@sha256%3A5b0ca20174d1c6cdb3229bf625a906acf64509575c3092895e341ec301c5e92e?arch=arm64\u0026repository_url=registry.redhat.io/rhceph/keepalived-rhel10\u0026tag=1781018336"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:be1e659b4f556e0dd65aa36141fa4ab940c5bdee4cf96e1425addb95330c9a09_arm64",
                "product": {
                  "name": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:be1e659b4f556e0dd65aa36141fa4ab940c5bdee4cf96e1425addb95330c9a09_arm64",
                  "product_id": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:be1e659b4f556e0dd65aa36141fa4ab940c5bdee4cf96e1425addb95330c9a09_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oauth2-proxy-rhel9@sha256%3Abe1e659b4f556e0dd65aa36141fa4ab940c5bdee4cf96e1425addb95330c9a09?arch=arm64\u0026repository_url=registry.redhat.io/rhceph/oauth2-proxy-rhel9\u0026tag=1781018431"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:1eb37889b6fd96e9bb95257e30918212f290caf50d9dbe76b6e46af067cdeda6_arm64",
                "product": {
                  "name": "registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:1eb37889b6fd96e9bb95257e30918212f290caf50d9dbe76b6e46af067cdeda6_arm64",
                  "product_id": "registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:1eb37889b6fd96e9bb95257e30918212f290caf50d9dbe76b6e46af067cdeda6_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhceph-9-rhel9@sha256%3A1eb37889b6fd96e9bb95257e30918212f290caf50d9dbe76b6e46af067cdeda6?arch=arm64\u0026repository_url=registry.redhat.io/rhceph/rhceph-9-rhel9\u0026tag=1781160401"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:087c99d8838e9c2bd9a298fc320e954ea27203bbceaced070930c87f8a6581a8_arm64",
                "product": {
                  "name": "registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:087c99d8838e9c2bd9a298fc320e954ea27203bbceaced070930c87f8a6581a8_arm64",
                  "product_id": "registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:087c99d8838e9c2bd9a298fc320e954ea27203bbceaced070930c87f8a6581a8_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/snmp-notifier-rhel10@sha256%3A087c99d8838e9c2bd9a298fc320e954ea27203bbceaced070930c87f8a6581a8?arch=arm64\u0026repository_url=registry.redhat.io/rhceph/snmp-notifier-rhel10\u0026tag=1781017635"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/alloy-rhel10@sha256:4275a746d036f4a674f2a41c584d1061160392818c0bf47f1e831034654c3c26_ppc64le",
                "product": {
                  "name": "registry.redhat.io/rhceph/alloy-rhel10@sha256:4275a746d036f4a674f2a41c584d1061160392818c0bf47f1e831034654c3c26_ppc64le",
                  "product_id": "registry.redhat.io/rhceph/alloy-rhel10@sha256:4275a746d036f4a674f2a41c584d1061160392818c0bf47f1e831034654c3c26_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/alloy-rhel10@sha256%3A4275a746d036f4a674f2a41c584d1061160392818c0bf47f1e831034654c3c26?arch=ppc64le\u0026repository_url=registry.redhat.io/rhceph/alloy-rhel10\u0026tag=1781021746"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/grafana-rhel10@sha256:ed69dc576cf04d5ed270a4a271aa89a5476b46d58a85c937f1c63d6680b08b73_ppc64le",
                "product": {
                  "name": "registry.redhat.io/rhceph/grafana-rhel10@sha256:ed69dc576cf04d5ed270a4a271aa89a5476b46d58a85c937f1c63d6680b08b73_ppc64le",
                  "product_id": "registry.redhat.io/rhceph/grafana-rhel10@sha256:ed69dc576cf04d5ed270a4a271aa89a5476b46d58a85c937f1c63d6680b08b73_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/grafana-rhel10@sha256%3Aed69dc576cf04d5ed270a4a271aa89a5476b46d58a85c937f1c63d6680b08b73?arch=ppc64le\u0026repository_url=registry.redhat.io/rhceph/grafana-rhel10\u0026tag=1781018768"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:01f59a1b847d03122126fb3db62daa1e924d2bed5da9506061013800085c100b_ppc64le",
                "product": {
                  "name": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:01f59a1b847d03122126fb3db62daa1e924d2bed5da9506061013800085c100b_ppc64le",
                  "product_id": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:01f59a1b847d03122126fb3db62daa1e924d2bed5da9506061013800085c100b_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhceph-haproxy-rhel9@sha256%3A01f59a1b847d03122126fb3db62daa1e924d2bed5da9506061013800085c100b?arch=ppc64le\u0026repository_url=registry.redhat.io/rhceph/rhceph-haproxy-rhel9\u0026tag=1781021473"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/keepalived-rhel10@sha256:498e05a439ac63b3a42882dd908d086078f697ff8c29dc2effedec8b26dd6521_ppc64le",
                "product": {
                  "name": "registry.redhat.io/rhceph/keepalived-rhel10@sha256:498e05a439ac63b3a42882dd908d086078f697ff8c29dc2effedec8b26dd6521_ppc64le",
                  "product_id": "registry.redhat.io/rhceph/keepalived-rhel10@sha256:498e05a439ac63b3a42882dd908d086078f697ff8c29dc2effedec8b26dd6521_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keepalived-rhel10@sha256%3A498e05a439ac63b3a42882dd908d086078f697ff8c29dc2effedec8b26dd6521?arch=ppc64le\u0026repository_url=registry.redhat.io/rhceph/keepalived-rhel10\u0026tag=1781018336"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:8afff49beebd4fd88ccf687a421bca80c6d3295a38ef9fcef92ab2049d5f78db_ppc64le",
                "product": {
                  "name": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:8afff49beebd4fd88ccf687a421bca80c6d3295a38ef9fcef92ab2049d5f78db_ppc64le",
                  "product_id": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:8afff49beebd4fd88ccf687a421bca80c6d3295a38ef9fcef92ab2049d5f78db_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oauth2-proxy-rhel9@sha256%3A8afff49beebd4fd88ccf687a421bca80c6d3295a38ef9fcef92ab2049d5f78db?arch=ppc64le\u0026repository_url=registry.redhat.io/rhceph/oauth2-proxy-rhel9\u0026tag=1781018431"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:8705162c817322ffdabfee74c5fec3ce4f37be667f46634981cb66db0354ef10_ppc64le",
                "product": {
                  "name": "registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:8705162c817322ffdabfee74c5fec3ce4f37be667f46634981cb66db0354ef10_ppc64le",
                  "product_id": "registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:8705162c817322ffdabfee74c5fec3ce4f37be667f46634981cb66db0354ef10_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhceph-9-rhel9@sha256%3A8705162c817322ffdabfee74c5fec3ce4f37be667f46634981cb66db0354ef10?arch=ppc64le\u0026repository_url=registry.redhat.io/rhceph/rhceph-9-rhel9\u0026tag=1781160401"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:94a7dea2910f1f440c42c143f930886b529b00a3d6a0eab08d06596f157977a9_ppc64le",
                "product": {
                  "name": "registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:94a7dea2910f1f440c42c143f930886b529b00a3d6a0eab08d06596f157977a9_ppc64le",
                  "product_id": "registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:94a7dea2910f1f440c42c143f930886b529b00a3d6a0eab08d06596f157977a9_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/snmp-notifier-rhel10@sha256%3A94a7dea2910f1f440c42c143f930886b529b00a3d6a0eab08d06596f157977a9?arch=ppc64le\u0026repository_url=registry.redhat.io/rhceph/snmp-notifier-rhel10\u0026tag=1781017635"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/alloy-rhel10@sha256:b1c91e9df4b0bb9437394b92444480d6417a39bb46c8474d8c8027ab01732ca4_s390x",
                "product": {
                  "name": "registry.redhat.io/rhceph/alloy-rhel10@sha256:b1c91e9df4b0bb9437394b92444480d6417a39bb46c8474d8c8027ab01732ca4_s390x",
                  "product_id": "registry.redhat.io/rhceph/alloy-rhel10@sha256:b1c91e9df4b0bb9437394b92444480d6417a39bb46c8474d8c8027ab01732ca4_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/alloy-rhel10@sha256%3Ab1c91e9df4b0bb9437394b92444480d6417a39bb46c8474d8c8027ab01732ca4?arch=s390x\u0026repository_url=registry.redhat.io/rhceph/alloy-rhel10\u0026tag=1781021746"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/grafana-rhel10@sha256:f73c95e3c84116b5fb7320af22e69d252df69d4559f4ce7bdfd59f42902338c7_s390x",
                "product": {
                  "name": "registry.redhat.io/rhceph/grafana-rhel10@sha256:f73c95e3c84116b5fb7320af22e69d252df69d4559f4ce7bdfd59f42902338c7_s390x",
                  "product_id": "registry.redhat.io/rhceph/grafana-rhel10@sha256:f73c95e3c84116b5fb7320af22e69d252df69d4559f4ce7bdfd59f42902338c7_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/grafana-rhel10@sha256%3Af73c95e3c84116b5fb7320af22e69d252df69d4559f4ce7bdfd59f42902338c7?arch=s390x\u0026repository_url=registry.redhat.io/rhceph/grafana-rhel10\u0026tag=1781018768"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:94f30db2064d0d62776af04715a67f90d3fb852855c123eff51285122e296328_s390x",
                "product": {
                  "name": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:94f30db2064d0d62776af04715a67f90d3fb852855c123eff51285122e296328_s390x",
                  "product_id": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:94f30db2064d0d62776af04715a67f90d3fb852855c123eff51285122e296328_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhceph-haproxy-rhel9@sha256%3A94f30db2064d0d62776af04715a67f90d3fb852855c123eff51285122e296328?arch=s390x\u0026repository_url=registry.redhat.io/rhceph/rhceph-haproxy-rhel9\u0026tag=1781021473"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/keepalived-rhel10@sha256:41e5ab72e781b1baa72b7158b2fb6af247c52042f828b496a15ff78adde413a3_s390x",
                "product": {
                  "name": "registry.redhat.io/rhceph/keepalived-rhel10@sha256:41e5ab72e781b1baa72b7158b2fb6af247c52042f828b496a15ff78adde413a3_s390x",
                  "product_id": "registry.redhat.io/rhceph/keepalived-rhel10@sha256:41e5ab72e781b1baa72b7158b2fb6af247c52042f828b496a15ff78adde413a3_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keepalived-rhel10@sha256%3A41e5ab72e781b1baa72b7158b2fb6af247c52042f828b496a15ff78adde413a3?arch=s390x\u0026repository_url=registry.redhat.io/rhceph/keepalived-rhel10\u0026tag=1781018336"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:5f4554659280456cba1fb0078dceb46964a9759f1c5ec0a8fa5d4a6f2bc4889f_s390x",
                "product": {
                  "name": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:5f4554659280456cba1fb0078dceb46964a9759f1c5ec0a8fa5d4a6f2bc4889f_s390x",
                  "product_id": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:5f4554659280456cba1fb0078dceb46964a9759f1c5ec0a8fa5d4a6f2bc4889f_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oauth2-proxy-rhel9@sha256%3A5f4554659280456cba1fb0078dceb46964a9759f1c5ec0a8fa5d4a6f2bc4889f?arch=s390x\u0026repository_url=registry.redhat.io/rhceph/oauth2-proxy-rhel9\u0026tag=1781018431"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:b73e4453cb4a353d458ce8fe0641dfd1314ba383d836f1631e0cca5d9ffdca4e_s390x",
                "product": {
                  "name": "registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:b73e4453cb4a353d458ce8fe0641dfd1314ba383d836f1631e0cca5d9ffdca4e_s390x",
                  "product_id": "registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:b73e4453cb4a353d458ce8fe0641dfd1314ba383d836f1631e0cca5d9ffdca4e_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhceph-9-rhel9@sha256%3Ab73e4453cb4a353d458ce8fe0641dfd1314ba383d836f1631e0cca5d9ffdca4e?arch=s390x\u0026repository_url=registry.redhat.io/rhceph/rhceph-9-rhel9\u0026tag=1781160401"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:e5244c1382ad165701a9e156618d8452d78e70675d33668cbdaf6d93f99a58f1_s390x",
                "product": {
                  "name": "registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:e5244c1382ad165701a9e156618d8452d78e70675d33668cbdaf6d93f99a58f1_s390x",
                  "product_id": "registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:e5244c1382ad165701a9e156618d8452d78e70675d33668cbdaf6d93f99a58f1_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/snmp-notifier-rhel10@sha256%3Ae5244c1382ad165701a9e156618d8452d78e70675d33668cbdaf6d93f99a58f1?arch=s390x\u0026repository_url=registry.redhat.io/rhceph/snmp-notifier-rhel10\u0026tag=1781017635"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/alloy-rhel10@sha256:4275a746d036f4a674f2a41c584d1061160392818c0bf47f1e831034654c3c26_ppc64le as a component of Red Hat Ceph Storage 9.0",
          "product_id": "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:4275a746d036f4a674f2a41c584d1061160392818c0bf47f1e831034654c3c26_ppc64le"
        },
        "product_reference": "registry.redhat.io/rhceph/alloy-rhel10@sha256:4275a746d036f4a674f2a41c584d1061160392818c0bf47f1e831034654c3c26_ppc64le",
        "relates_to_product_reference": "Red Hat Ceph Storage 9.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/alloy-rhel10@sha256:6cc5bc1fe92aecfb16bb3b6ccf833d06dc4484f8f7c9ffb7bedc3b3e49ace7b6_arm64 as a component of Red Hat Ceph Storage 9.0",
          "product_id": "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:6cc5bc1fe92aecfb16bb3b6ccf833d06dc4484f8f7c9ffb7bedc3b3e49ace7b6_arm64"
        },
        "product_reference": "registry.redhat.io/rhceph/alloy-rhel10@sha256:6cc5bc1fe92aecfb16bb3b6ccf833d06dc4484f8f7c9ffb7bedc3b3e49ace7b6_arm64",
        "relates_to_product_reference": "Red Hat Ceph Storage 9.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/alloy-rhel10@sha256:b1c91e9df4b0bb9437394b92444480d6417a39bb46c8474d8c8027ab01732ca4_s390x as a component of Red Hat Ceph Storage 9.0",
          "product_id": "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:b1c91e9df4b0bb9437394b92444480d6417a39bb46c8474d8c8027ab01732ca4_s390x"
        },
        "product_reference": "registry.redhat.io/rhceph/alloy-rhel10@sha256:b1c91e9df4b0bb9437394b92444480d6417a39bb46c8474d8c8027ab01732ca4_s390x",
        "relates_to_product_reference": "Red Hat Ceph Storage 9.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/alloy-rhel10@sha256:b839e918e2b695ee22e954273f016c6ecdebc1f6048e538560b7162f21f9b83a_amd64 as a component of Red Hat Ceph Storage 9.0",
          "product_id": "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:b839e918e2b695ee22e954273f016c6ecdebc1f6048e538560b7162f21f9b83a_amd64"
        },
        "product_reference": "registry.redhat.io/rhceph/alloy-rhel10@sha256:b839e918e2b695ee22e954273f016c6ecdebc1f6048e538560b7162f21f9b83a_amd64",
        "relates_to_product_reference": "Red Hat Ceph Storage 9.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/grafana-rhel10@sha256:10d6f4417f63579b5ad0c2642e68049bf4b0cbc07393f05f5ccd6d93ad9b4551_arm64 as a component of Red Hat Ceph Storage 9.0",
          "product_id": "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:10d6f4417f63579b5ad0c2642e68049bf4b0cbc07393f05f5ccd6d93ad9b4551_arm64"
        },
        "product_reference": "registry.redhat.io/rhceph/grafana-rhel10@sha256:10d6f4417f63579b5ad0c2642e68049bf4b0cbc07393f05f5ccd6d93ad9b4551_arm64",
        "relates_to_product_reference": "Red Hat Ceph Storage 9.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/grafana-rhel10@sha256:b413d37ad30595df599c3aa8c7dbfad08acc6fa9a59e5300d6e66746d0ed7c92_amd64 as a component of Red Hat Ceph Storage 9.0",
          "product_id": "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:b413d37ad30595df599c3aa8c7dbfad08acc6fa9a59e5300d6e66746d0ed7c92_amd64"
        },
        "product_reference": "registry.redhat.io/rhceph/grafana-rhel10@sha256:b413d37ad30595df599c3aa8c7dbfad08acc6fa9a59e5300d6e66746d0ed7c92_amd64",
        "relates_to_product_reference": "Red Hat Ceph Storage 9.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/grafana-rhel10@sha256:ed69dc576cf04d5ed270a4a271aa89a5476b46d58a85c937f1c63d6680b08b73_ppc64le as a component of Red Hat Ceph Storage 9.0",
          "product_id": "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:ed69dc576cf04d5ed270a4a271aa89a5476b46d58a85c937f1c63d6680b08b73_ppc64le"
        },
        "product_reference": "registry.redhat.io/rhceph/grafana-rhel10@sha256:ed69dc576cf04d5ed270a4a271aa89a5476b46d58a85c937f1c63d6680b08b73_ppc64le",
        "relates_to_product_reference": "Red Hat Ceph Storage 9.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/grafana-rhel10@sha256:f73c95e3c84116b5fb7320af22e69d252df69d4559f4ce7bdfd59f42902338c7_s390x as a component of Red Hat Ceph Storage 9.0",
          "product_id": "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:f73c95e3c84116b5fb7320af22e69d252df69d4559f4ce7bdfd59f42902338c7_s390x"
        },
        "product_reference": "registry.redhat.io/rhceph/grafana-rhel10@sha256:f73c95e3c84116b5fb7320af22e69d252df69d4559f4ce7bdfd59f42902338c7_s390x",
        "relates_to_product_reference": "Red Hat Ceph Storage 9.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/keepalived-rhel10@sha256:41e5ab72e781b1baa72b7158b2fb6af247c52042f828b496a15ff78adde413a3_s390x as a component of Red Hat Ceph Storage 9.0",
          "product_id": "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:41e5ab72e781b1baa72b7158b2fb6af247c52042f828b496a15ff78adde413a3_s390x"
        },
        "product_reference": "registry.redhat.io/rhceph/keepalived-rhel10@sha256:41e5ab72e781b1baa72b7158b2fb6af247c52042f828b496a15ff78adde413a3_s390x",
        "relates_to_product_reference": "Red Hat Ceph Storage 9.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/keepalived-rhel10@sha256:498e05a439ac63b3a42882dd908d086078f697ff8c29dc2effedec8b26dd6521_ppc64le as a component of Red Hat Ceph Storage 9.0",
          "product_id": "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:498e05a439ac63b3a42882dd908d086078f697ff8c29dc2effedec8b26dd6521_ppc64le"
        },
        "product_reference": "registry.redhat.io/rhceph/keepalived-rhel10@sha256:498e05a439ac63b3a42882dd908d086078f697ff8c29dc2effedec8b26dd6521_ppc64le",
        "relates_to_product_reference": "Red Hat Ceph Storage 9.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/keepalived-rhel10@sha256:5b0ca20174d1c6cdb3229bf625a906acf64509575c3092895e341ec301c5e92e_arm64 as a component of Red Hat Ceph Storage 9.0",
          "product_id": "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:5b0ca20174d1c6cdb3229bf625a906acf64509575c3092895e341ec301c5e92e_arm64"
        },
        "product_reference": "registry.redhat.io/rhceph/keepalived-rhel10@sha256:5b0ca20174d1c6cdb3229bf625a906acf64509575c3092895e341ec301c5e92e_arm64",
        "relates_to_product_reference": "Red Hat Ceph Storage 9.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/keepalived-rhel10@sha256:a214782e432451ca21a5042abd90bf44c57ed01563dfa4d1b81ef72f38ef2265_amd64 as a component of Red Hat Ceph Storage 9.0",
          "product_id": "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:a214782e432451ca21a5042abd90bf44c57ed01563dfa4d1b81ef72f38ef2265_amd64"
        },
        "product_reference": "registry.redhat.io/rhceph/keepalived-rhel10@sha256:a214782e432451ca21a5042abd90bf44c57ed01563dfa4d1b81ef72f38ef2265_amd64",
        "relates_to_product_reference": "Red Hat Ceph Storage 9.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:09758d53ef928e8740a95a31572462681a0f70c1c2a6eaa6a72a45fddf4538b7_amd64 as a component of Red Hat Ceph Storage 9.0",
          "product_id": "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:09758d53ef928e8740a95a31572462681a0f70c1c2a6eaa6a72a45fddf4538b7_amd64"
        },
        "product_reference": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:09758d53ef928e8740a95a31572462681a0f70c1c2a6eaa6a72a45fddf4538b7_amd64",
        "relates_to_product_reference": "Red Hat Ceph Storage 9.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:5f4554659280456cba1fb0078dceb46964a9759f1c5ec0a8fa5d4a6f2bc4889f_s390x as a component of Red Hat Ceph Storage 9.0",
          "product_id": "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:5f4554659280456cba1fb0078dceb46964a9759f1c5ec0a8fa5d4a6f2bc4889f_s390x"
        },
        "product_reference": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:5f4554659280456cba1fb0078dceb46964a9759f1c5ec0a8fa5d4a6f2bc4889f_s390x",
        "relates_to_product_reference": "Red Hat Ceph Storage 9.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:8afff49beebd4fd88ccf687a421bca80c6d3295a38ef9fcef92ab2049d5f78db_ppc64le as a component of Red Hat Ceph Storage 9.0",
          "product_id": "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:8afff49beebd4fd88ccf687a421bca80c6d3295a38ef9fcef92ab2049d5f78db_ppc64le"
        },
        "product_reference": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:8afff49beebd4fd88ccf687a421bca80c6d3295a38ef9fcef92ab2049d5f78db_ppc64le",
        "relates_to_product_reference": "Red Hat Ceph Storage 9.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:be1e659b4f556e0dd65aa36141fa4ab940c5bdee4cf96e1425addb95330c9a09_arm64 as a component of Red Hat Ceph Storage 9.0",
          "product_id": "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:be1e659b4f556e0dd65aa36141fa4ab940c5bdee4cf96e1425addb95330c9a09_arm64"
        },
        "product_reference": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:be1e659b4f556e0dd65aa36141fa4ab940c5bdee4cf96e1425addb95330c9a09_arm64",
        "relates_to_product_reference": "Red Hat Ceph Storage 9.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:1eb37889b6fd96e9bb95257e30918212f290caf50d9dbe76b6e46af067cdeda6_arm64 as a component of Red Hat Ceph Storage 9.0",
          "product_id": "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:1eb37889b6fd96e9bb95257e30918212f290caf50d9dbe76b6e46af067cdeda6_arm64"
        },
        "product_reference": "registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:1eb37889b6fd96e9bb95257e30918212f290caf50d9dbe76b6e46af067cdeda6_arm64",
        "relates_to_product_reference": "Red Hat Ceph Storage 9.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:8705162c817322ffdabfee74c5fec3ce4f37be667f46634981cb66db0354ef10_ppc64le as a component of Red Hat Ceph Storage 9.0",
          "product_id": "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:8705162c817322ffdabfee74c5fec3ce4f37be667f46634981cb66db0354ef10_ppc64le"
        },
        "product_reference": "registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:8705162c817322ffdabfee74c5fec3ce4f37be667f46634981cb66db0354ef10_ppc64le",
        "relates_to_product_reference": "Red Hat Ceph Storage 9.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:b73e4453cb4a353d458ce8fe0641dfd1314ba383d836f1631e0cca5d9ffdca4e_s390x as a component of Red Hat Ceph Storage 9.0",
          "product_id": "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:b73e4453cb4a353d458ce8fe0641dfd1314ba383d836f1631e0cca5d9ffdca4e_s390x"
        },
        "product_reference": "registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:b73e4453cb4a353d458ce8fe0641dfd1314ba383d836f1631e0cca5d9ffdca4e_s390x",
        "relates_to_product_reference": "Red Hat Ceph Storage 9.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:fa557386c42c9144dcef16957fc0f02b6e631d037cb982c70a043ce11d760556_amd64 as a component of Red Hat Ceph Storage 9.0",
          "product_id": "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:fa557386c42c9144dcef16957fc0f02b6e631d037cb982c70a043ce11d760556_amd64"
        },
        "product_reference": "registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:fa557386c42c9144dcef16957fc0f02b6e631d037cb982c70a043ce11d760556_amd64",
        "relates_to_product_reference": "Red Hat Ceph Storage 9.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:01f59a1b847d03122126fb3db62daa1e924d2bed5da9506061013800085c100b_ppc64le as a component of Red Hat Ceph Storage 9.0",
          "product_id": "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:01f59a1b847d03122126fb3db62daa1e924d2bed5da9506061013800085c100b_ppc64le"
        },
        "product_reference": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:01f59a1b847d03122126fb3db62daa1e924d2bed5da9506061013800085c100b_ppc64le",
        "relates_to_product_reference": "Red Hat Ceph Storage 9.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:10ed1c8ea558924ddfa1d3ab6a43d34a6edd16e09dac44d593487bc22b2fc7fc_arm64 as a component of Red Hat Ceph Storage 9.0",
          "product_id": "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:10ed1c8ea558924ddfa1d3ab6a43d34a6edd16e09dac44d593487bc22b2fc7fc_arm64"
        },
        "product_reference": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:10ed1c8ea558924ddfa1d3ab6a43d34a6edd16e09dac44d593487bc22b2fc7fc_arm64",
        "relates_to_product_reference": "Red Hat Ceph Storage 9.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:94f30db2064d0d62776af04715a67f90d3fb852855c123eff51285122e296328_s390x as a component of Red Hat Ceph Storage 9.0",
          "product_id": "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:94f30db2064d0d62776af04715a67f90d3fb852855c123eff51285122e296328_s390x"
        },
        "product_reference": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:94f30db2064d0d62776af04715a67f90d3fb852855c123eff51285122e296328_s390x",
        "relates_to_product_reference": "Red Hat Ceph Storage 9.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:f58c4b24482819abd2cb67f30d3e1034d61dd85a043f76bc3f487e48941bd201_amd64 as a component of Red Hat Ceph Storage 9.0",
          "product_id": "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:f58c4b24482819abd2cb67f30d3e1034d61dd85a043f76bc3f487e48941bd201_amd64"
        },
        "product_reference": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:f58c4b24482819abd2cb67f30d3e1034d61dd85a043f76bc3f487e48941bd201_amd64",
        "relates_to_product_reference": "Red Hat Ceph Storage 9.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:087c99d8838e9c2bd9a298fc320e954ea27203bbceaced070930c87f8a6581a8_arm64 as a component of Red Hat Ceph Storage 9.0",
          "product_id": "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:087c99d8838e9c2bd9a298fc320e954ea27203bbceaced070930c87f8a6581a8_arm64"
        },
        "product_reference": "registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:087c99d8838e9c2bd9a298fc320e954ea27203bbceaced070930c87f8a6581a8_arm64",
        "relates_to_product_reference": "Red Hat Ceph Storage 9.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:94a7dea2910f1f440c42c143f930886b529b00a3d6a0eab08d06596f157977a9_ppc64le as a component of Red Hat Ceph Storage 9.0",
          "product_id": "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:94a7dea2910f1f440c42c143f930886b529b00a3d6a0eab08d06596f157977a9_ppc64le"
        },
        "product_reference": "registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:94a7dea2910f1f440c42c143f930886b529b00a3d6a0eab08d06596f157977a9_ppc64le",
        "relates_to_product_reference": "Red Hat Ceph Storage 9.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:e40d93d9d76fe8aa344905015d75ae13f94622f6e64de432b73af1930136f8de_amd64 as a component of Red Hat Ceph Storage 9.0",
          "product_id": "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:e40d93d9d76fe8aa344905015d75ae13f94622f6e64de432b73af1930136f8de_amd64"
        },
        "product_reference": "registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:e40d93d9d76fe8aa344905015d75ae13f94622f6e64de432b73af1930136f8de_amd64",
        "relates_to_product_reference": "Red Hat Ceph Storage 9.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:e5244c1382ad165701a9e156618d8452d78e70675d33668cbdaf6d93f99a58f1_s390x as a component of Red Hat Ceph Storage 9.0",
          "product_id": "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:e5244c1382ad165701a9e156618d8452d78e70675d33668cbdaf6d93f99a58f1_s390x"
        },
        "product_reference": "registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:e5244c1382ad165701a9e156618d8452d78e70675d33668cbdaf6d93f99a58f1_s390x",
        "relates_to_product_reference": "Red Hat Ceph Storage 9.0"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-55565",
      "cwe": {
        "id": "CWE-835",
        "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
      },
      "discovery_date": "2024-12-09T02:00:45.255738+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:4275a746d036f4a674f2a41c584d1061160392818c0bf47f1e831034654c3c26_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:6cc5bc1fe92aecfb16bb3b6ccf833d06dc4484f8f7c9ffb7bedc3b3e49ace7b6_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:b1c91e9df4b0bb9437394b92444480d6417a39bb46c8474d8c8027ab01732ca4_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:b839e918e2b695ee22e954273f016c6ecdebc1f6048e538560b7162f21f9b83a_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:10d6f4417f63579b5ad0c2642e68049bf4b0cbc07393f05f5ccd6d93ad9b4551_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:b413d37ad30595df599c3aa8c7dbfad08acc6fa9a59e5300d6e66746d0ed7c92_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:ed69dc576cf04d5ed270a4a271aa89a5476b46d58a85c937f1c63d6680b08b73_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:f73c95e3c84116b5fb7320af22e69d252df69d4559f4ce7bdfd59f42902338c7_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:41e5ab72e781b1baa72b7158b2fb6af247c52042f828b496a15ff78adde413a3_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:498e05a439ac63b3a42882dd908d086078f697ff8c29dc2effedec8b26dd6521_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:5b0ca20174d1c6cdb3229bf625a906acf64509575c3092895e341ec301c5e92e_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:a214782e432451ca21a5042abd90bf44c57ed01563dfa4d1b81ef72f38ef2265_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:09758d53ef928e8740a95a31572462681a0f70c1c2a6eaa6a72a45fddf4538b7_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:5f4554659280456cba1fb0078dceb46964a9759f1c5ec0a8fa5d4a6f2bc4889f_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:8afff49beebd4fd88ccf687a421bca80c6d3295a38ef9fcef92ab2049d5f78db_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:be1e659b4f556e0dd65aa36141fa4ab940c5bdee4cf96e1425addb95330c9a09_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:01f59a1b847d03122126fb3db62daa1e924d2bed5da9506061013800085c100b_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:10ed1c8ea558924ddfa1d3ab6a43d34a6edd16e09dac44d593487bc22b2fc7fc_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:94f30db2064d0d62776af04715a67f90d3fb852855c123eff51285122e296328_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:f58c4b24482819abd2cb67f30d3e1034d61dd85a043f76bc3f487e48941bd201_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:087c99d8838e9c2bd9a298fc320e954ea27203bbceaced070930c87f8a6581a8_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:94a7dea2910f1f440c42c143f930886b529b00a3d6a0eab08d06596f157977a9_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:e40d93d9d76fe8aa344905015d75ae13f94622f6e64de432b73af1930136f8de_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:e5244c1382ad165701a9e156618d8452d78e70675d33668cbdaf6d93f99a58f1_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2331063"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in nanoid. Affected versions of nanoid mishandles non-integer values. When nanoid is called with a fractional value, there were a number of undesirable effects:\n\n- In browser and non-secure, the code infinite loops on while (size--)\n- In node, the value of poolOffset becomes fractional, causing calls to nanoid to return zeroes until the pool is next filled: when i is initialized to poolOffset, pool[i] \u0026 63 -\u003e undefined \u0026 63 -\u003e 0\n- If the first call in node is a fractional argument, the initial buffer allocation fails with an error\n\nThe highest impact of this issue system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "nanoid: nanoid mishandles non-integer values",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:1eb37889b6fd96e9bb95257e30918212f290caf50d9dbe76b6e46af067cdeda6_arm64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:8705162c817322ffdabfee74c5fec3ce4f37be667f46634981cb66db0354ef10_ppc64le",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:b73e4453cb4a353d458ce8fe0641dfd1314ba383d836f1631e0cca5d9ffdca4e_s390x",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:fa557386c42c9144dcef16957fc0f02b6e631d037cb982c70a043ce11d760556_amd64"
        ],
        "known_not_affected": [
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:4275a746d036f4a674f2a41c584d1061160392818c0bf47f1e831034654c3c26_ppc64le",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:6cc5bc1fe92aecfb16bb3b6ccf833d06dc4484f8f7c9ffb7bedc3b3e49ace7b6_arm64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:b1c91e9df4b0bb9437394b92444480d6417a39bb46c8474d8c8027ab01732ca4_s390x",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:b839e918e2b695ee22e954273f016c6ecdebc1f6048e538560b7162f21f9b83a_amd64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:10d6f4417f63579b5ad0c2642e68049bf4b0cbc07393f05f5ccd6d93ad9b4551_arm64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:b413d37ad30595df599c3aa8c7dbfad08acc6fa9a59e5300d6e66746d0ed7c92_amd64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:ed69dc576cf04d5ed270a4a271aa89a5476b46d58a85c937f1c63d6680b08b73_ppc64le",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:f73c95e3c84116b5fb7320af22e69d252df69d4559f4ce7bdfd59f42902338c7_s390x",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:41e5ab72e781b1baa72b7158b2fb6af247c52042f828b496a15ff78adde413a3_s390x",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:498e05a439ac63b3a42882dd908d086078f697ff8c29dc2effedec8b26dd6521_ppc64le",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:5b0ca20174d1c6cdb3229bf625a906acf64509575c3092895e341ec301c5e92e_arm64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:a214782e432451ca21a5042abd90bf44c57ed01563dfa4d1b81ef72f38ef2265_amd64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:09758d53ef928e8740a95a31572462681a0f70c1c2a6eaa6a72a45fddf4538b7_amd64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:5f4554659280456cba1fb0078dceb46964a9759f1c5ec0a8fa5d4a6f2bc4889f_s390x",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:8afff49beebd4fd88ccf687a421bca80c6d3295a38ef9fcef92ab2049d5f78db_ppc64le",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:be1e659b4f556e0dd65aa36141fa4ab940c5bdee4cf96e1425addb95330c9a09_arm64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:01f59a1b847d03122126fb3db62daa1e924d2bed5da9506061013800085c100b_ppc64le",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:10ed1c8ea558924ddfa1d3ab6a43d34a6edd16e09dac44d593487bc22b2fc7fc_arm64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:94f30db2064d0d62776af04715a67f90d3fb852855c123eff51285122e296328_s390x",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:f58c4b24482819abd2cb67f30d3e1034d61dd85a043f76bc3f487e48941bd201_amd64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:087c99d8838e9c2bd9a298fc320e954ea27203bbceaced070930c87f8a6581a8_arm64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:94a7dea2910f1f440c42c143f930886b529b00a3d6a0eab08d06596f157977a9_ppc64le",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:e40d93d9d76fe8aa344905015d75ae13f94622f6e64de432b73af1930136f8de_amd64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:e5244c1382ad165701a9e156618d8452d78e70675d33668cbdaf6d93f99a58f1_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-55565"
        },
        {
          "category": "external",
          "summary": "RHBZ#2331063",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331063"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-55565",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-55565"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-55565",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-55565"
        },
        {
          "category": "external",
          "summary": "https://github.com/ai/nanoid/compare/3.3.7...3.3.8",
          "url": "https://github.com/ai/nanoid/compare/3.3.7...3.3.8"
        },
        {
          "category": "external",
          "summary": "https://github.com/ai/nanoid/pull/510",
          "url": "https://github.com/ai/nanoid/pull/510"
        },
        {
          "category": "external",
          "summary": "https://github.com/ai/nanoid/releases/tag/5.0.9",
          "url": "https://github.com/ai/nanoid/releases/tag/5.0.9"
        }
      ],
      "release_date": "2024-12-09T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-16T16:32:52+00:00",
          "details": "The container images provided by this update can be downloaded from the\nRed Hat container registry at registry.redhat.io using the \"podman pull\" command.",
          "product_ids": [
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:1eb37889b6fd96e9bb95257e30918212f290caf50d9dbe76b6e46af067cdeda6_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:8705162c817322ffdabfee74c5fec3ce4f37be667f46634981cb66db0354ef10_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:b73e4453cb4a353d458ce8fe0641dfd1314ba383d836f1631e0cca5d9ffdca4e_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:fa557386c42c9144dcef16957fc0f02b6e631d037cb982c70a043ce11d760556_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:26411"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:4275a746d036f4a674f2a41c584d1061160392818c0bf47f1e831034654c3c26_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:6cc5bc1fe92aecfb16bb3b6ccf833d06dc4484f8f7c9ffb7bedc3b3e49ace7b6_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:b1c91e9df4b0bb9437394b92444480d6417a39bb46c8474d8c8027ab01732ca4_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:b839e918e2b695ee22e954273f016c6ecdebc1f6048e538560b7162f21f9b83a_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:10d6f4417f63579b5ad0c2642e68049bf4b0cbc07393f05f5ccd6d93ad9b4551_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:b413d37ad30595df599c3aa8c7dbfad08acc6fa9a59e5300d6e66746d0ed7c92_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:ed69dc576cf04d5ed270a4a271aa89a5476b46d58a85c937f1c63d6680b08b73_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:f73c95e3c84116b5fb7320af22e69d252df69d4559f4ce7bdfd59f42902338c7_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:41e5ab72e781b1baa72b7158b2fb6af247c52042f828b496a15ff78adde413a3_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:498e05a439ac63b3a42882dd908d086078f697ff8c29dc2effedec8b26dd6521_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:5b0ca20174d1c6cdb3229bf625a906acf64509575c3092895e341ec301c5e92e_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:a214782e432451ca21a5042abd90bf44c57ed01563dfa4d1b81ef72f38ef2265_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:09758d53ef928e8740a95a31572462681a0f70c1c2a6eaa6a72a45fddf4538b7_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:5f4554659280456cba1fb0078dceb46964a9759f1c5ec0a8fa5d4a6f2bc4889f_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:8afff49beebd4fd88ccf687a421bca80c6d3295a38ef9fcef92ab2049d5f78db_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:be1e659b4f556e0dd65aa36141fa4ab940c5bdee4cf96e1425addb95330c9a09_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:1eb37889b6fd96e9bb95257e30918212f290caf50d9dbe76b6e46af067cdeda6_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:8705162c817322ffdabfee74c5fec3ce4f37be667f46634981cb66db0354ef10_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:b73e4453cb4a353d458ce8fe0641dfd1314ba383d836f1631e0cca5d9ffdca4e_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:fa557386c42c9144dcef16957fc0f02b6e631d037cb982c70a043ce11d760556_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:01f59a1b847d03122126fb3db62daa1e924d2bed5da9506061013800085c100b_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:10ed1c8ea558924ddfa1d3ab6a43d34a6edd16e09dac44d593487bc22b2fc7fc_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:94f30db2064d0d62776af04715a67f90d3fb852855c123eff51285122e296328_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:f58c4b24482819abd2cb67f30d3e1034d61dd85a043f76bc3f487e48941bd201_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:087c99d8838e9c2bd9a298fc320e954ea27203bbceaced070930c87f8a6581a8_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:94a7dea2910f1f440c42c143f930886b529b00a3d6a0eab08d06596f157977a9_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:e40d93d9d76fe8aa344905015d75ae13f94622f6e64de432b73af1930136f8de_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:e5244c1382ad165701a9e156618d8452d78e70675d33668cbdaf6d93f99a58f1_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "nanoid: nanoid mishandles non-integer values"
    },
    {
      "cve": "CVE-2025-47913",
      "discovery_date": "2025-11-13T22:01:26.092452+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:4275a746d036f4a674f2a41c584d1061160392818c0bf47f1e831034654c3c26_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:6cc5bc1fe92aecfb16bb3b6ccf833d06dc4484f8f7c9ffb7bedc3b3e49ace7b6_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:b1c91e9df4b0bb9437394b92444480d6417a39bb46c8474d8c8027ab01732ca4_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:b839e918e2b695ee22e954273f016c6ecdebc1f6048e538560b7162f21f9b83a_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:41e5ab72e781b1baa72b7158b2fb6af247c52042f828b496a15ff78adde413a3_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:498e05a439ac63b3a42882dd908d086078f697ff8c29dc2effedec8b26dd6521_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:5b0ca20174d1c6cdb3229bf625a906acf64509575c3092895e341ec301c5e92e_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:a214782e432451ca21a5042abd90bf44c57ed01563dfa4d1b81ef72f38ef2265_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:09758d53ef928e8740a95a31572462681a0f70c1c2a6eaa6a72a45fddf4538b7_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:5f4554659280456cba1fb0078dceb46964a9759f1c5ec0a8fa5d4a6f2bc4889f_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:8afff49beebd4fd88ccf687a421bca80c6d3295a38ef9fcef92ab2049d5f78db_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:be1e659b4f556e0dd65aa36141fa4ab940c5bdee4cf96e1425addb95330c9a09_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:1eb37889b6fd96e9bb95257e30918212f290caf50d9dbe76b6e46af067cdeda6_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:8705162c817322ffdabfee74c5fec3ce4f37be667f46634981cb66db0354ef10_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:b73e4453cb4a353d458ce8fe0641dfd1314ba383d836f1631e0cca5d9ffdca4e_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:fa557386c42c9144dcef16957fc0f02b6e631d037cb982c70a043ce11d760556_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:01f59a1b847d03122126fb3db62daa1e924d2bed5da9506061013800085c100b_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:10ed1c8ea558924ddfa1d3ab6a43d34a6edd16e09dac44d593487bc22b2fc7fc_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:94f30db2064d0d62776af04715a67f90d3fb852855c123eff51285122e296328_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:f58c4b24482819abd2cb67f30d3e1034d61dd85a043f76bc3f487e48941bd201_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:087c99d8838e9c2bd9a298fc320e954ea27203bbceaced070930c87f8a6581a8_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:94a7dea2910f1f440c42c143f930886b529b00a3d6a0eab08d06596f157977a9_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:e40d93d9d76fe8aa344905015d75ae13f94622f6e64de432b73af1930136f8de_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:e5244c1382ad165701a9e156618d8452d78e70675d33668cbdaf6d93f99a58f1_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2414943"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw in golang.org/x/crypto/ssh/agent causes the SSH agent client to panic when a peer responds with the generic SSH_AGENT_SUCCESS (0x06) message to requests expecting typed replies (e.g., List, Sign). The unmarshal layer produces an unexpected message type, which the client code does not handle, leading to panic(\"unreachable\") or a nil-pointer dereference. A malicious agent or forwarded connection can exploit this to terminate the client process.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability was marked as Important because it allows any malicious or misbehaving SSH agent to force a crash in the client process using a single valid protocol byte. The panic occurs before the client has a chance to validate message structure or recover, which means an attacker controlling\u2014or intercepting\u2014SSH agent traffic can reliably terminate processes that rely on agent interactions. In environments where SSH agents operate over forwarded sockets, shared workspaces, or CI/CD runners, this turns into a reliable, unauthenticated remote denial of service against critical automation or developer tooling. The flaw also stems from unsafe assumptions in the unmarshalling logic, where unexpected but protocol-legal message types drop into \u201cunreachable\u201d code paths instead of being handled gracefully\u2014making it a design-level reliability break rather than a simple error-handling bug. For this reason, it is rated as an important availability-impacting vulnerability rather than a moderate issue.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:10d6f4417f63579b5ad0c2642e68049bf4b0cbc07393f05f5ccd6d93ad9b4551_arm64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:b413d37ad30595df599c3aa8c7dbfad08acc6fa9a59e5300d6e66746d0ed7c92_amd64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:ed69dc576cf04d5ed270a4a271aa89a5476b46d58a85c937f1c63d6680b08b73_ppc64le",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:f73c95e3c84116b5fb7320af22e69d252df69d4559f4ce7bdfd59f42902338c7_s390x"
        ],
        "known_not_affected": [
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:4275a746d036f4a674f2a41c584d1061160392818c0bf47f1e831034654c3c26_ppc64le",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:6cc5bc1fe92aecfb16bb3b6ccf833d06dc4484f8f7c9ffb7bedc3b3e49ace7b6_arm64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:b1c91e9df4b0bb9437394b92444480d6417a39bb46c8474d8c8027ab01732ca4_s390x",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:b839e918e2b695ee22e954273f016c6ecdebc1f6048e538560b7162f21f9b83a_amd64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:41e5ab72e781b1baa72b7158b2fb6af247c52042f828b496a15ff78adde413a3_s390x",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:498e05a439ac63b3a42882dd908d086078f697ff8c29dc2effedec8b26dd6521_ppc64le",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:5b0ca20174d1c6cdb3229bf625a906acf64509575c3092895e341ec301c5e92e_arm64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:a214782e432451ca21a5042abd90bf44c57ed01563dfa4d1b81ef72f38ef2265_amd64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:09758d53ef928e8740a95a31572462681a0f70c1c2a6eaa6a72a45fddf4538b7_amd64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:5f4554659280456cba1fb0078dceb46964a9759f1c5ec0a8fa5d4a6f2bc4889f_s390x",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:8afff49beebd4fd88ccf687a421bca80c6d3295a38ef9fcef92ab2049d5f78db_ppc64le",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:be1e659b4f556e0dd65aa36141fa4ab940c5bdee4cf96e1425addb95330c9a09_arm64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:1eb37889b6fd96e9bb95257e30918212f290caf50d9dbe76b6e46af067cdeda6_arm64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:8705162c817322ffdabfee74c5fec3ce4f37be667f46634981cb66db0354ef10_ppc64le",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:b73e4453cb4a353d458ce8fe0641dfd1314ba383d836f1631e0cca5d9ffdca4e_s390x",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:fa557386c42c9144dcef16957fc0f02b6e631d037cb982c70a043ce11d760556_amd64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:01f59a1b847d03122126fb3db62daa1e924d2bed5da9506061013800085c100b_ppc64le",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:10ed1c8ea558924ddfa1d3ab6a43d34a6edd16e09dac44d593487bc22b2fc7fc_arm64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:94f30db2064d0d62776af04715a67f90d3fb852855c123eff51285122e296328_s390x",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:f58c4b24482819abd2cb67f30d3e1034d61dd85a043f76bc3f487e48941bd201_amd64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:087c99d8838e9c2bd9a298fc320e954ea27203bbceaced070930c87f8a6581a8_arm64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:94a7dea2910f1f440c42c143f930886b529b00a3d6a0eab08d06596f157977a9_ppc64le",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:e40d93d9d76fe8aa344905015d75ae13f94622f6e64de432b73af1930136f8de_amd64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:e5244c1382ad165701a9e156618d8452d78e70675d33668cbdaf6d93f99a58f1_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-47913"
        },
        {
          "category": "external",
          "summary": "RHBZ#2414943",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2414943"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-47913",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-47913"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-47913",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47913"
        },
        {
          "category": "external",
          "summary": "https://github.com/advisories/GHSA-hcg3-q754-cr77",
          "url": "https://github.com/advisories/GHSA-hcg3-q754-cr77"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/700295",
          "url": "https://go.dev/cl/700295"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/75178",
          "url": "https://go.dev/issue/75178"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2025-4116",
          "url": "https://pkg.go.dev/vuln/GO-2025-4116"
        }
      ],
      "release_date": "2025-11-13T21:29:39.907000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-16T16:32:52+00:00",
          "details": "The container images provided by this update can be downloaded from the\nRed Hat container registry at registry.redhat.io using the \"podman pull\" command.",
          "product_ids": [
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:10d6f4417f63579b5ad0c2642e68049bf4b0cbc07393f05f5ccd6d93ad9b4551_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:b413d37ad30595df599c3aa8c7dbfad08acc6fa9a59e5300d6e66746d0ed7c92_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:ed69dc576cf04d5ed270a4a271aa89a5476b46d58a85c937f1c63d6680b08b73_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:f73c95e3c84116b5fb7320af22e69d252df69d4559f4ce7bdfd59f42902338c7_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:26411"
        },
        {
          "category": "workaround",
          "details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
          "product_ids": [
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:4275a746d036f4a674f2a41c584d1061160392818c0bf47f1e831034654c3c26_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:6cc5bc1fe92aecfb16bb3b6ccf833d06dc4484f8f7c9ffb7bedc3b3e49ace7b6_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:b1c91e9df4b0bb9437394b92444480d6417a39bb46c8474d8c8027ab01732ca4_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:b839e918e2b695ee22e954273f016c6ecdebc1f6048e538560b7162f21f9b83a_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:10d6f4417f63579b5ad0c2642e68049bf4b0cbc07393f05f5ccd6d93ad9b4551_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:b413d37ad30595df599c3aa8c7dbfad08acc6fa9a59e5300d6e66746d0ed7c92_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:ed69dc576cf04d5ed270a4a271aa89a5476b46d58a85c937f1c63d6680b08b73_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:f73c95e3c84116b5fb7320af22e69d252df69d4559f4ce7bdfd59f42902338c7_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:41e5ab72e781b1baa72b7158b2fb6af247c52042f828b496a15ff78adde413a3_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:498e05a439ac63b3a42882dd908d086078f697ff8c29dc2effedec8b26dd6521_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:5b0ca20174d1c6cdb3229bf625a906acf64509575c3092895e341ec301c5e92e_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:a214782e432451ca21a5042abd90bf44c57ed01563dfa4d1b81ef72f38ef2265_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:09758d53ef928e8740a95a31572462681a0f70c1c2a6eaa6a72a45fddf4538b7_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:5f4554659280456cba1fb0078dceb46964a9759f1c5ec0a8fa5d4a6f2bc4889f_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:8afff49beebd4fd88ccf687a421bca80c6d3295a38ef9fcef92ab2049d5f78db_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:be1e659b4f556e0dd65aa36141fa4ab940c5bdee4cf96e1425addb95330c9a09_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:1eb37889b6fd96e9bb95257e30918212f290caf50d9dbe76b6e46af067cdeda6_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:8705162c817322ffdabfee74c5fec3ce4f37be667f46634981cb66db0354ef10_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:b73e4453cb4a353d458ce8fe0641dfd1314ba383d836f1631e0cca5d9ffdca4e_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:fa557386c42c9144dcef16957fc0f02b6e631d037cb982c70a043ce11d760556_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:01f59a1b847d03122126fb3db62daa1e924d2bed5da9506061013800085c100b_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:10ed1c8ea558924ddfa1d3ab6a43d34a6edd16e09dac44d593487bc22b2fc7fc_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:94f30db2064d0d62776af04715a67f90d3fb852855c123eff51285122e296328_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:f58c4b24482819abd2cb67f30d3e1034d61dd85a043f76bc3f487e48941bd201_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:087c99d8838e9c2bd9a298fc320e954ea27203bbceaced070930c87f8a6581a8_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:94a7dea2910f1f440c42c143f930886b529b00a3d6a0eab08d06596f157977a9_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:e40d93d9d76fe8aa344905015d75ae13f94622f6e64de432b73af1930136f8de_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:e5244c1382ad165701a9e156618d8452d78e70675d33668cbdaf6d93f99a58f1_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:4275a746d036f4a674f2a41c584d1061160392818c0bf47f1e831034654c3c26_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:6cc5bc1fe92aecfb16bb3b6ccf833d06dc4484f8f7c9ffb7bedc3b3e49ace7b6_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:b1c91e9df4b0bb9437394b92444480d6417a39bb46c8474d8c8027ab01732ca4_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:b839e918e2b695ee22e954273f016c6ecdebc1f6048e538560b7162f21f9b83a_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:10d6f4417f63579b5ad0c2642e68049bf4b0cbc07393f05f5ccd6d93ad9b4551_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:b413d37ad30595df599c3aa8c7dbfad08acc6fa9a59e5300d6e66746d0ed7c92_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:ed69dc576cf04d5ed270a4a271aa89a5476b46d58a85c937f1c63d6680b08b73_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:f73c95e3c84116b5fb7320af22e69d252df69d4559f4ce7bdfd59f42902338c7_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:41e5ab72e781b1baa72b7158b2fb6af247c52042f828b496a15ff78adde413a3_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:498e05a439ac63b3a42882dd908d086078f697ff8c29dc2effedec8b26dd6521_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:5b0ca20174d1c6cdb3229bf625a906acf64509575c3092895e341ec301c5e92e_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:a214782e432451ca21a5042abd90bf44c57ed01563dfa4d1b81ef72f38ef2265_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:09758d53ef928e8740a95a31572462681a0f70c1c2a6eaa6a72a45fddf4538b7_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:5f4554659280456cba1fb0078dceb46964a9759f1c5ec0a8fa5d4a6f2bc4889f_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:8afff49beebd4fd88ccf687a421bca80c6d3295a38ef9fcef92ab2049d5f78db_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:be1e659b4f556e0dd65aa36141fa4ab940c5bdee4cf96e1425addb95330c9a09_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:1eb37889b6fd96e9bb95257e30918212f290caf50d9dbe76b6e46af067cdeda6_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:8705162c817322ffdabfee74c5fec3ce4f37be667f46634981cb66db0354ef10_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:b73e4453cb4a353d458ce8fe0641dfd1314ba383d836f1631e0cca5d9ffdca4e_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:fa557386c42c9144dcef16957fc0f02b6e631d037cb982c70a043ce11d760556_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:01f59a1b847d03122126fb3db62daa1e924d2bed5da9506061013800085c100b_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:10ed1c8ea558924ddfa1d3ab6a43d34a6edd16e09dac44d593487bc22b2fc7fc_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:94f30db2064d0d62776af04715a67f90d3fb852855c123eff51285122e296328_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:f58c4b24482819abd2cb67f30d3e1034d61dd85a043f76bc3f487e48941bd201_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:087c99d8838e9c2bd9a298fc320e954ea27203bbceaced070930c87f8a6581a8_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:94a7dea2910f1f440c42c143f930886b529b00a3d6a0eab08d06596f157977a9_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:e40d93d9d76fe8aa344905015d75ae13f94622f6e64de432b73af1930136f8de_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:e5244c1382ad165701a9e156618d8452d78e70675d33668cbdaf6d93f99a58f1_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS"
    },
    {
      "cve": "CVE-2025-47914",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2025-11-19T21:01:06.202641+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:4275a746d036f4a674f2a41c584d1061160392818c0bf47f1e831034654c3c26_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:6cc5bc1fe92aecfb16bb3b6ccf833d06dc4484f8f7c9ffb7bedc3b3e49ace7b6_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:b1c91e9df4b0bb9437394b92444480d6417a39bb46c8474d8c8027ab01732ca4_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:b839e918e2b695ee22e954273f016c6ecdebc1f6048e538560b7162f21f9b83a_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:41e5ab72e781b1baa72b7158b2fb6af247c52042f828b496a15ff78adde413a3_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:498e05a439ac63b3a42882dd908d086078f697ff8c29dc2effedec8b26dd6521_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:5b0ca20174d1c6cdb3229bf625a906acf64509575c3092895e341ec301c5e92e_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:a214782e432451ca21a5042abd90bf44c57ed01563dfa4d1b81ef72f38ef2265_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:09758d53ef928e8740a95a31572462681a0f70c1c2a6eaa6a72a45fddf4538b7_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:5f4554659280456cba1fb0078dceb46964a9759f1c5ec0a8fa5d4a6f2bc4889f_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:8afff49beebd4fd88ccf687a421bca80c6d3295a38ef9fcef92ab2049d5f78db_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:be1e659b4f556e0dd65aa36141fa4ab940c5bdee4cf96e1425addb95330c9a09_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:1eb37889b6fd96e9bb95257e30918212f290caf50d9dbe76b6e46af067cdeda6_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:8705162c817322ffdabfee74c5fec3ce4f37be667f46634981cb66db0354ef10_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:b73e4453cb4a353d458ce8fe0641dfd1314ba383d836f1631e0cca5d9ffdca4e_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:fa557386c42c9144dcef16957fc0f02b6e631d037cb982c70a043ce11d760556_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:01f59a1b847d03122126fb3db62daa1e924d2bed5da9506061013800085c100b_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:10ed1c8ea558924ddfa1d3ab6a43d34a6edd16e09dac44d593487bc22b2fc7fc_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:94f30db2064d0d62776af04715a67f90d3fb852855c123eff51285122e296328_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:f58c4b24482819abd2cb67f30d3e1034d61dd85a043f76bc3f487e48941bd201_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:087c99d8838e9c2bd9a298fc320e954ea27203bbceaced070930c87f8a6581a8_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:94a7dea2910f1f440c42c143f930886b529b00a3d6a0eab08d06596f157977a9_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:e40d93d9d76fe8aa344905015d75ae13f94622f6e64de432b73af1930136f8de_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:e5244c1382ad165701a9e156618d8452d78e70675d33668cbdaf6d93f99a58f1_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2416000"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the SSH Agent servers component (golang.org/x/crypto/ssh/agent). This vulnerability allows a remote attacker to cause a denial of service (DoS) by sending a specially crafted, malformed message during new identity requests. The server fails to validate the size of these messages, leading to an out-of-bounds read that can cause the program to panic and terminate.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/crypto/ssh/agent: SSH Agent servers: Denial of Service due to malformed messages",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated Moderate for Red Hat products. The golang.org/x/crypto/ssh/agent library, when used in SSH Agent servers, does not properly validate the size of messages during new identity requests. A specially crafted malformed message can lead to an out-of-bounds read, causing the program to panic and resulting in a denial of service.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:10d6f4417f63579b5ad0c2642e68049bf4b0cbc07393f05f5ccd6d93ad9b4551_arm64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:b413d37ad30595df599c3aa8c7dbfad08acc6fa9a59e5300d6e66746d0ed7c92_amd64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:ed69dc576cf04d5ed270a4a271aa89a5476b46d58a85c937f1c63d6680b08b73_ppc64le",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:f73c95e3c84116b5fb7320af22e69d252df69d4559f4ce7bdfd59f42902338c7_s390x"
        ],
        "known_not_affected": [
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:4275a746d036f4a674f2a41c584d1061160392818c0bf47f1e831034654c3c26_ppc64le",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:6cc5bc1fe92aecfb16bb3b6ccf833d06dc4484f8f7c9ffb7bedc3b3e49ace7b6_arm64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:b1c91e9df4b0bb9437394b92444480d6417a39bb46c8474d8c8027ab01732ca4_s390x",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:b839e918e2b695ee22e954273f016c6ecdebc1f6048e538560b7162f21f9b83a_amd64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:41e5ab72e781b1baa72b7158b2fb6af247c52042f828b496a15ff78adde413a3_s390x",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:498e05a439ac63b3a42882dd908d086078f697ff8c29dc2effedec8b26dd6521_ppc64le",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:5b0ca20174d1c6cdb3229bf625a906acf64509575c3092895e341ec301c5e92e_arm64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:a214782e432451ca21a5042abd90bf44c57ed01563dfa4d1b81ef72f38ef2265_amd64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:09758d53ef928e8740a95a31572462681a0f70c1c2a6eaa6a72a45fddf4538b7_amd64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:5f4554659280456cba1fb0078dceb46964a9759f1c5ec0a8fa5d4a6f2bc4889f_s390x",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:8afff49beebd4fd88ccf687a421bca80c6d3295a38ef9fcef92ab2049d5f78db_ppc64le",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:be1e659b4f556e0dd65aa36141fa4ab940c5bdee4cf96e1425addb95330c9a09_arm64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:1eb37889b6fd96e9bb95257e30918212f290caf50d9dbe76b6e46af067cdeda6_arm64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:8705162c817322ffdabfee74c5fec3ce4f37be667f46634981cb66db0354ef10_ppc64le",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:b73e4453cb4a353d458ce8fe0641dfd1314ba383d836f1631e0cca5d9ffdca4e_s390x",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:fa557386c42c9144dcef16957fc0f02b6e631d037cb982c70a043ce11d760556_amd64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:01f59a1b847d03122126fb3db62daa1e924d2bed5da9506061013800085c100b_ppc64le",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:10ed1c8ea558924ddfa1d3ab6a43d34a6edd16e09dac44d593487bc22b2fc7fc_arm64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:94f30db2064d0d62776af04715a67f90d3fb852855c123eff51285122e296328_s390x",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:f58c4b24482819abd2cb67f30d3e1034d61dd85a043f76bc3f487e48941bd201_amd64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:087c99d8838e9c2bd9a298fc320e954ea27203bbceaced070930c87f8a6581a8_arm64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:94a7dea2910f1f440c42c143f930886b529b00a3d6a0eab08d06596f157977a9_ppc64le",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:e40d93d9d76fe8aa344905015d75ae13f94622f6e64de432b73af1930136f8de_amd64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:e5244c1382ad165701a9e156618d8452d78e70675d33668cbdaf6d93f99a58f1_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-47914"
        },
        {
          "category": "external",
          "summary": "RHBZ#2416000",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416000"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-47914",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-47914"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-47914",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47914"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/721960",
          "url": "https://go.dev/cl/721960"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/76364",
          "url": "https://go.dev/issue/76364"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/w-oX3UxNcZA",
          "url": "https://groups.google.com/g/golang-announce/c/w-oX3UxNcZA"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2025-4135",
          "url": "https://pkg.go.dev/vuln/GO-2025-4135"
        }
      ],
      "release_date": "2025-11-19T20:33:43.126000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-16T16:32:52+00:00",
          "details": "The container images provided by this update can be downloaded from the\nRed Hat container registry at registry.redhat.io using the \"podman pull\" command.",
          "product_ids": [
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:10d6f4417f63579b5ad0c2642e68049bf4b0cbc07393f05f5ccd6d93ad9b4551_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:b413d37ad30595df599c3aa8c7dbfad08acc6fa9a59e5300d6e66746d0ed7c92_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:ed69dc576cf04d5ed270a4a271aa89a5476b46d58a85c937f1c63d6680b08b73_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:f73c95e3c84116b5fb7320af22e69d252df69d4559f4ce7bdfd59f42902338c7_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:26411"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:4275a746d036f4a674f2a41c584d1061160392818c0bf47f1e831034654c3c26_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:6cc5bc1fe92aecfb16bb3b6ccf833d06dc4484f8f7c9ffb7bedc3b3e49ace7b6_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:b1c91e9df4b0bb9437394b92444480d6417a39bb46c8474d8c8027ab01732ca4_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:b839e918e2b695ee22e954273f016c6ecdebc1f6048e538560b7162f21f9b83a_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:10d6f4417f63579b5ad0c2642e68049bf4b0cbc07393f05f5ccd6d93ad9b4551_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:b413d37ad30595df599c3aa8c7dbfad08acc6fa9a59e5300d6e66746d0ed7c92_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:ed69dc576cf04d5ed270a4a271aa89a5476b46d58a85c937f1c63d6680b08b73_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:f73c95e3c84116b5fb7320af22e69d252df69d4559f4ce7bdfd59f42902338c7_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:41e5ab72e781b1baa72b7158b2fb6af247c52042f828b496a15ff78adde413a3_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:498e05a439ac63b3a42882dd908d086078f697ff8c29dc2effedec8b26dd6521_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:5b0ca20174d1c6cdb3229bf625a906acf64509575c3092895e341ec301c5e92e_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:a214782e432451ca21a5042abd90bf44c57ed01563dfa4d1b81ef72f38ef2265_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:09758d53ef928e8740a95a31572462681a0f70c1c2a6eaa6a72a45fddf4538b7_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:5f4554659280456cba1fb0078dceb46964a9759f1c5ec0a8fa5d4a6f2bc4889f_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:8afff49beebd4fd88ccf687a421bca80c6d3295a38ef9fcef92ab2049d5f78db_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:be1e659b4f556e0dd65aa36141fa4ab940c5bdee4cf96e1425addb95330c9a09_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:1eb37889b6fd96e9bb95257e30918212f290caf50d9dbe76b6e46af067cdeda6_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:8705162c817322ffdabfee74c5fec3ce4f37be667f46634981cb66db0354ef10_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:b73e4453cb4a353d458ce8fe0641dfd1314ba383d836f1631e0cca5d9ffdca4e_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:fa557386c42c9144dcef16957fc0f02b6e631d037cb982c70a043ce11d760556_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:01f59a1b847d03122126fb3db62daa1e924d2bed5da9506061013800085c100b_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:10ed1c8ea558924ddfa1d3ab6a43d34a6edd16e09dac44d593487bc22b2fc7fc_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:94f30db2064d0d62776af04715a67f90d3fb852855c123eff51285122e296328_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:f58c4b24482819abd2cb67f30d3e1034d61dd85a043f76bc3f487e48941bd201_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:087c99d8838e9c2bd9a298fc320e954ea27203bbceaced070930c87f8a6581a8_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:94a7dea2910f1f440c42c143f930886b529b00a3d6a0eab08d06596f157977a9_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:e40d93d9d76fe8aa344905015d75ae13f94622f6e64de432b73af1930136f8de_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:e5244c1382ad165701a9e156618d8452d78e70675d33668cbdaf6d93f99a58f1_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "golang.org/x/crypto/ssh/agent: SSH Agent servers: Denial of Service due to malformed messages"
    },
    {
      "cve": "CVE-2025-58181",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2025-11-19T21:00:50.197590+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:4275a746d036f4a674f2a41c584d1061160392818c0bf47f1e831034654c3c26_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:6cc5bc1fe92aecfb16bb3b6ccf833d06dc4484f8f7c9ffb7bedc3b3e49ace7b6_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:b1c91e9df4b0bb9437394b92444480d6417a39bb46c8474d8c8027ab01732ca4_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:b839e918e2b695ee22e954273f016c6ecdebc1f6048e538560b7162f21f9b83a_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:41e5ab72e781b1baa72b7158b2fb6af247c52042f828b496a15ff78adde413a3_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:498e05a439ac63b3a42882dd908d086078f697ff8c29dc2effedec8b26dd6521_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:5b0ca20174d1c6cdb3229bf625a906acf64509575c3092895e341ec301c5e92e_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:a214782e432451ca21a5042abd90bf44c57ed01563dfa4d1b81ef72f38ef2265_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:09758d53ef928e8740a95a31572462681a0f70c1c2a6eaa6a72a45fddf4538b7_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:5f4554659280456cba1fb0078dceb46964a9759f1c5ec0a8fa5d4a6f2bc4889f_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:8afff49beebd4fd88ccf687a421bca80c6d3295a38ef9fcef92ab2049d5f78db_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:be1e659b4f556e0dd65aa36141fa4ab940c5bdee4cf96e1425addb95330c9a09_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:1eb37889b6fd96e9bb95257e30918212f290caf50d9dbe76b6e46af067cdeda6_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:8705162c817322ffdabfee74c5fec3ce4f37be667f46634981cb66db0354ef10_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:b73e4453cb4a353d458ce8fe0641dfd1314ba383d836f1631e0cca5d9ffdca4e_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:fa557386c42c9144dcef16957fc0f02b6e631d037cb982c70a043ce11d760556_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:01f59a1b847d03122126fb3db62daa1e924d2bed5da9506061013800085c100b_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:10ed1c8ea558924ddfa1d3ab6a43d34a6edd16e09dac44d593487bc22b2fc7fc_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:94f30db2064d0d62776af04715a67f90d3fb852855c123eff51285122e296328_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:f58c4b24482819abd2cb67f30d3e1034d61dd85a043f76bc3f487e48941bd201_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:087c99d8838e9c2bd9a298fc320e954ea27203bbceaced070930c87f8a6581a8_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:94a7dea2910f1f440c42c143f930886b529b00a3d6a0eab08d06596f157977a9_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:e40d93d9d76fe8aa344905015d75ae13f94622f6e64de432b73af1930136f8de_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:e5244c1382ad165701a9e156618d8452d78e70675d33668cbdaf6d93f99a58f1_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2415997"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/crypto/ssh. An attacker can exploit this vulnerability by sending specially crafted GSSAPI (Generic Security Service Application Program Interface) authentication requests to an SSH (Secure Shell) server. The server fails to validate the number of mechanisms specified in these requests, leading to unbounded memory consumption. This can result in a Denial of Service (DoS), making the SSH server unavailable to legitimate users.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via unbounded memory consumption in GSSAPI authentication",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated Moderate for Red Hat. SSH servers utilizing `golang.org/x/crypto/ssh` and configured to process GSSAPI authentication requests are susceptible to unbounded memory consumption. An attacker can exploit this by sending specially crafted GSSAPI authentication requests, potentially leading to a denial of service.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:10d6f4417f63579b5ad0c2642e68049bf4b0cbc07393f05f5ccd6d93ad9b4551_arm64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:b413d37ad30595df599c3aa8c7dbfad08acc6fa9a59e5300d6e66746d0ed7c92_amd64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:ed69dc576cf04d5ed270a4a271aa89a5476b46d58a85c937f1c63d6680b08b73_ppc64le",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:f73c95e3c84116b5fb7320af22e69d252df69d4559f4ce7bdfd59f42902338c7_s390x"
        ],
        "known_not_affected": [
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:4275a746d036f4a674f2a41c584d1061160392818c0bf47f1e831034654c3c26_ppc64le",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:6cc5bc1fe92aecfb16bb3b6ccf833d06dc4484f8f7c9ffb7bedc3b3e49ace7b6_arm64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:b1c91e9df4b0bb9437394b92444480d6417a39bb46c8474d8c8027ab01732ca4_s390x",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:b839e918e2b695ee22e954273f016c6ecdebc1f6048e538560b7162f21f9b83a_amd64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:41e5ab72e781b1baa72b7158b2fb6af247c52042f828b496a15ff78adde413a3_s390x",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:498e05a439ac63b3a42882dd908d086078f697ff8c29dc2effedec8b26dd6521_ppc64le",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:5b0ca20174d1c6cdb3229bf625a906acf64509575c3092895e341ec301c5e92e_arm64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:a214782e432451ca21a5042abd90bf44c57ed01563dfa4d1b81ef72f38ef2265_amd64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:09758d53ef928e8740a95a31572462681a0f70c1c2a6eaa6a72a45fddf4538b7_amd64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:5f4554659280456cba1fb0078dceb46964a9759f1c5ec0a8fa5d4a6f2bc4889f_s390x",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:8afff49beebd4fd88ccf687a421bca80c6d3295a38ef9fcef92ab2049d5f78db_ppc64le",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:be1e659b4f556e0dd65aa36141fa4ab940c5bdee4cf96e1425addb95330c9a09_arm64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:1eb37889b6fd96e9bb95257e30918212f290caf50d9dbe76b6e46af067cdeda6_arm64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:8705162c817322ffdabfee74c5fec3ce4f37be667f46634981cb66db0354ef10_ppc64le",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:b73e4453cb4a353d458ce8fe0641dfd1314ba383d836f1631e0cca5d9ffdca4e_s390x",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:fa557386c42c9144dcef16957fc0f02b6e631d037cb982c70a043ce11d760556_amd64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:01f59a1b847d03122126fb3db62daa1e924d2bed5da9506061013800085c100b_ppc64le",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:10ed1c8ea558924ddfa1d3ab6a43d34a6edd16e09dac44d593487bc22b2fc7fc_arm64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:94f30db2064d0d62776af04715a67f90d3fb852855c123eff51285122e296328_s390x",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:f58c4b24482819abd2cb67f30d3e1034d61dd85a043f76bc3f487e48941bd201_amd64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:087c99d8838e9c2bd9a298fc320e954ea27203bbceaced070930c87f8a6581a8_arm64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:94a7dea2910f1f440c42c143f930886b529b00a3d6a0eab08d06596f157977a9_ppc64le",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:e40d93d9d76fe8aa344905015d75ae13f94622f6e64de432b73af1930136f8de_amd64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:e5244c1382ad165701a9e156618d8452d78e70675d33668cbdaf6d93f99a58f1_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-58181"
        },
        {
          "category": "external",
          "summary": "RHBZ#2415997",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2415997"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-58181",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-58181"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-58181",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-58181"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/721961",
          "url": "https://go.dev/cl/721961"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/76363",
          "url": "https://go.dev/issue/76363"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/w-oX3UxNcZA",
          "url": "https://groups.google.com/g/golang-announce/c/w-oX3UxNcZA"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2025-4134",
          "url": "https://pkg.go.dev/vuln/GO-2025-4134"
        }
      ],
      "release_date": "2025-11-19T20:33:42.795000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-16T16:32:52+00:00",
          "details": "The container images provided by this update can be downloaded from the\nRed Hat container registry at registry.redhat.io using the \"podman pull\" command.",
          "product_ids": [
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:10d6f4417f63579b5ad0c2642e68049bf4b0cbc07393f05f5ccd6d93ad9b4551_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:b413d37ad30595df599c3aa8c7dbfad08acc6fa9a59e5300d6e66746d0ed7c92_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:ed69dc576cf04d5ed270a4a271aa89a5476b46d58a85c937f1c63d6680b08b73_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:f73c95e3c84116b5fb7320af22e69d252df69d4559f4ce7bdfd59f42902338c7_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:26411"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:4275a746d036f4a674f2a41c584d1061160392818c0bf47f1e831034654c3c26_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:6cc5bc1fe92aecfb16bb3b6ccf833d06dc4484f8f7c9ffb7bedc3b3e49ace7b6_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:b1c91e9df4b0bb9437394b92444480d6417a39bb46c8474d8c8027ab01732ca4_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:b839e918e2b695ee22e954273f016c6ecdebc1f6048e538560b7162f21f9b83a_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:10d6f4417f63579b5ad0c2642e68049bf4b0cbc07393f05f5ccd6d93ad9b4551_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:b413d37ad30595df599c3aa8c7dbfad08acc6fa9a59e5300d6e66746d0ed7c92_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:ed69dc576cf04d5ed270a4a271aa89a5476b46d58a85c937f1c63d6680b08b73_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:f73c95e3c84116b5fb7320af22e69d252df69d4559f4ce7bdfd59f42902338c7_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:41e5ab72e781b1baa72b7158b2fb6af247c52042f828b496a15ff78adde413a3_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:498e05a439ac63b3a42882dd908d086078f697ff8c29dc2effedec8b26dd6521_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:5b0ca20174d1c6cdb3229bf625a906acf64509575c3092895e341ec301c5e92e_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:a214782e432451ca21a5042abd90bf44c57ed01563dfa4d1b81ef72f38ef2265_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:09758d53ef928e8740a95a31572462681a0f70c1c2a6eaa6a72a45fddf4538b7_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:5f4554659280456cba1fb0078dceb46964a9759f1c5ec0a8fa5d4a6f2bc4889f_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:8afff49beebd4fd88ccf687a421bca80c6d3295a38ef9fcef92ab2049d5f78db_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:be1e659b4f556e0dd65aa36141fa4ab940c5bdee4cf96e1425addb95330c9a09_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:1eb37889b6fd96e9bb95257e30918212f290caf50d9dbe76b6e46af067cdeda6_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:8705162c817322ffdabfee74c5fec3ce4f37be667f46634981cb66db0354ef10_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:b73e4453cb4a353d458ce8fe0641dfd1314ba383d836f1631e0cca5d9ffdca4e_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:fa557386c42c9144dcef16957fc0f02b6e631d037cb982c70a043ce11d760556_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:01f59a1b847d03122126fb3db62daa1e924d2bed5da9506061013800085c100b_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:10ed1c8ea558924ddfa1d3ab6a43d34a6edd16e09dac44d593487bc22b2fc7fc_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:94f30db2064d0d62776af04715a67f90d3fb852855c123eff51285122e296328_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:f58c4b24482819abd2cb67f30d3e1034d61dd85a043f76bc3f487e48941bd201_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:087c99d8838e9c2bd9a298fc320e954ea27203bbceaced070930c87f8a6581a8_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:94a7dea2910f1f440c42c143f930886b529b00a3d6a0eab08d06596f157977a9_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:e40d93d9d76fe8aa344905015d75ae13f94622f6e64de432b73af1930136f8de_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:e5244c1382ad165701a9e156618d8452d78e70675d33668cbdaf6d93f99a58f1_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via unbounded memory consumption in GSSAPI authentication"
    },
    {
      "cve": "CVE-2025-59343",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "discovery_date": "2025-09-24T18:01:19.612438+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:4275a746d036f4a674f2a41c584d1061160392818c0bf47f1e831034654c3c26_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:6cc5bc1fe92aecfb16bb3b6ccf833d06dc4484f8f7c9ffb7bedc3b3e49ace7b6_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:b1c91e9df4b0bb9437394b92444480d6417a39bb46c8474d8c8027ab01732ca4_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:b839e918e2b695ee22e954273f016c6ecdebc1f6048e538560b7162f21f9b83a_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:10d6f4417f63579b5ad0c2642e68049bf4b0cbc07393f05f5ccd6d93ad9b4551_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:b413d37ad30595df599c3aa8c7dbfad08acc6fa9a59e5300d6e66746d0ed7c92_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:ed69dc576cf04d5ed270a4a271aa89a5476b46d58a85c937f1c63d6680b08b73_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:f73c95e3c84116b5fb7320af22e69d252df69d4559f4ce7bdfd59f42902338c7_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:41e5ab72e781b1baa72b7158b2fb6af247c52042f828b496a15ff78adde413a3_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:498e05a439ac63b3a42882dd908d086078f697ff8c29dc2effedec8b26dd6521_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:5b0ca20174d1c6cdb3229bf625a906acf64509575c3092895e341ec301c5e92e_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:a214782e432451ca21a5042abd90bf44c57ed01563dfa4d1b81ef72f38ef2265_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:09758d53ef928e8740a95a31572462681a0f70c1c2a6eaa6a72a45fddf4538b7_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:5f4554659280456cba1fb0078dceb46964a9759f1c5ec0a8fa5d4a6f2bc4889f_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:8afff49beebd4fd88ccf687a421bca80c6d3295a38ef9fcef92ab2049d5f78db_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:be1e659b4f556e0dd65aa36141fa4ab940c5bdee4cf96e1425addb95330c9a09_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:01f59a1b847d03122126fb3db62daa1e924d2bed5da9506061013800085c100b_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:10ed1c8ea558924ddfa1d3ab6a43d34a6edd16e09dac44d593487bc22b2fc7fc_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:94f30db2064d0d62776af04715a67f90d3fb852855c123eff51285122e296328_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:f58c4b24482819abd2cb67f30d3e1034d61dd85a043f76bc3f487e48941bd201_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:087c99d8838e9c2bd9a298fc320e954ea27203bbceaced070930c87f8a6581a8_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:94a7dea2910f1f440c42c143f930886b529b00a3d6a0eab08d06596f157977a9_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:e40d93d9d76fe8aa344905015d75ae13f94622f6e64de432b73af1930136f8de_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:e5244c1382ad165701a9e156618d8452d78e70675d33668cbdaf6d93f99a58f1_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2397901"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A symlink validation bypass flaw has been discovered in the npm tar-fs library. Affected versions are vulnerable to a symlink validation bypass if the destination directory is predictable with a specific tarball.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "tar-fs: tar-fs symlink validation bypass",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:1eb37889b6fd96e9bb95257e30918212f290caf50d9dbe76b6e46af067cdeda6_arm64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:8705162c817322ffdabfee74c5fec3ce4f37be667f46634981cb66db0354ef10_ppc64le",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:b73e4453cb4a353d458ce8fe0641dfd1314ba383d836f1631e0cca5d9ffdca4e_s390x",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:fa557386c42c9144dcef16957fc0f02b6e631d037cb982c70a043ce11d760556_amd64"
        ],
        "known_not_affected": [
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:4275a746d036f4a674f2a41c584d1061160392818c0bf47f1e831034654c3c26_ppc64le",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:6cc5bc1fe92aecfb16bb3b6ccf833d06dc4484f8f7c9ffb7bedc3b3e49ace7b6_arm64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:b1c91e9df4b0bb9437394b92444480d6417a39bb46c8474d8c8027ab01732ca4_s390x",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:b839e918e2b695ee22e954273f016c6ecdebc1f6048e538560b7162f21f9b83a_amd64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:10d6f4417f63579b5ad0c2642e68049bf4b0cbc07393f05f5ccd6d93ad9b4551_arm64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:b413d37ad30595df599c3aa8c7dbfad08acc6fa9a59e5300d6e66746d0ed7c92_amd64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:ed69dc576cf04d5ed270a4a271aa89a5476b46d58a85c937f1c63d6680b08b73_ppc64le",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:f73c95e3c84116b5fb7320af22e69d252df69d4559f4ce7bdfd59f42902338c7_s390x",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:41e5ab72e781b1baa72b7158b2fb6af247c52042f828b496a15ff78adde413a3_s390x",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:498e05a439ac63b3a42882dd908d086078f697ff8c29dc2effedec8b26dd6521_ppc64le",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:5b0ca20174d1c6cdb3229bf625a906acf64509575c3092895e341ec301c5e92e_arm64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:a214782e432451ca21a5042abd90bf44c57ed01563dfa4d1b81ef72f38ef2265_amd64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:09758d53ef928e8740a95a31572462681a0f70c1c2a6eaa6a72a45fddf4538b7_amd64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:5f4554659280456cba1fb0078dceb46964a9759f1c5ec0a8fa5d4a6f2bc4889f_s390x",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:8afff49beebd4fd88ccf687a421bca80c6d3295a38ef9fcef92ab2049d5f78db_ppc64le",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:be1e659b4f556e0dd65aa36141fa4ab940c5bdee4cf96e1425addb95330c9a09_arm64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:01f59a1b847d03122126fb3db62daa1e924d2bed5da9506061013800085c100b_ppc64le",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:10ed1c8ea558924ddfa1d3ab6a43d34a6edd16e09dac44d593487bc22b2fc7fc_arm64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:94f30db2064d0d62776af04715a67f90d3fb852855c123eff51285122e296328_s390x",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:f58c4b24482819abd2cb67f30d3e1034d61dd85a043f76bc3f487e48941bd201_amd64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:087c99d8838e9c2bd9a298fc320e954ea27203bbceaced070930c87f8a6581a8_arm64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:94a7dea2910f1f440c42c143f930886b529b00a3d6a0eab08d06596f157977a9_ppc64le",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:e40d93d9d76fe8aa344905015d75ae13f94622f6e64de432b73af1930136f8de_amd64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:e5244c1382ad165701a9e156618d8452d78e70675d33668cbdaf6d93f99a58f1_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-59343"
        },
        {
          "category": "external",
          "summary": "RHBZ#2397901",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2397901"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-59343",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-59343"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-59343",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-59343"
        },
        {
          "category": "external",
          "summary": "https://github.com/mafintosh/tar-fs/commit/0bd54cdf06da2b7b5b95cd4b062c9f4e0a8c4e09",
          "url": "https://github.com/mafintosh/tar-fs/commit/0bd54cdf06da2b7b5b95cd4b062c9f4e0a8c4e09"
        },
        {
          "category": "external",
          "summary": "https://github.com/mafintosh/tar-fs/security/advisories/GHSA-vj76-c3g6-qr5v",
          "url": "https://github.com/mafintosh/tar-fs/security/advisories/GHSA-vj76-c3g6-qr5v"
        }
      ],
      "release_date": "2025-09-24T17:43:34.728000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-16T16:32:52+00:00",
          "details": "The container images provided by this update can be downloaded from the\nRed Hat container registry at registry.redhat.io using the \"podman pull\" command.",
          "product_ids": [
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:1eb37889b6fd96e9bb95257e30918212f290caf50d9dbe76b6e46af067cdeda6_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:8705162c817322ffdabfee74c5fec3ce4f37be667f46634981cb66db0354ef10_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:b73e4453cb4a353d458ce8fe0641dfd1314ba383d836f1631e0cca5d9ffdca4e_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:fa557386c42c9144dcef16957fc0f02b6e631d037cb982c70a043ce11d760556_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:26411"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:4275a746d036f4a674f2a41c584d1061160392818c0bf47f1e831034654c3c26_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:6cc5bc1fe92aecfb16bb3b6ccf833d06dc4484f8f7c9ffb7bedc3b3e49ace7b6_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:b1c91e9df4b0bb9437394b92444480d6417a39bb46c8474d8c8027ab01732ca4_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:b839e918e2b695ee22e954273f016c6ecdebc1f6048e538560b7162f21f9b83a_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:10d6f4417f63579b5ad0c2642e68049bf4b0cbc07393f05f5ccd6d93ad9b4551_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:b413d37ad30595df599c3aa8c7dbfad08acc6fa9a59e5300d6e66746d0ed7c92_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:ed69dc576cf04d5ed270a4a271aa89a5476b46d58a85c937f1c63d6680b08b73_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:f73c95e3c84116b5fb7320af22e69d252df69d4559f4ce7bdfd59f42902338c7_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:41e5ab72e781b1baa72b7158b2fb6af247c52042f828b496a15ff78adde413a3_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:498e05a439ac63b3a42882dd908d086078f697ff8c29dc2effedec8b26dd6521_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:5b0ca20174d1c6cdb3229bf625a906acf64509575c3092895e341ec301c5e92e_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:a214782e432451ca21a5042abd90bf44c57ed01563dfa4d1b81ef72f38ef2265_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:09758d53ef928e8740a95a31572462681a0f70c1c2a6eaa6a72a45fddf4538b7_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:5f4554659280456cba1fb0078dceb46964a9759f1c5ec0a8fa5d4a6f2bc4889f_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:8afff49beebd4fd88ccf687a421bca80c6d3295a38ef9fcef92ab2049d5f78db_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:be1e659b4f556e0dd65aa36141fa4ab940c5bdee4cf96e1425addb95330c9a09_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:1eb37889b6fd96e9bb95257e30918212f290caf50d9dbe76b6e46af067cdeda6_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:8705162c817322ffdabfee74c5fec3ce4f37be667f46634981cb66db0354ef10_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:b73e4453cb4a353d458ce8fe0641dfd1314ba383d836f1631e0cca5d9ffdca4e_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:fa557386c42c9144dcef16957fc0f02b6e631d037cb982c70a043ce11d760556_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:01f59a1b847d03122126fb3db62daa1e924d2bed5da9506061013800085c100b_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:10ed1c8ea558924ddfa1d3ab6a43d34a6edd16e09dac44d593487bc22b2fc7fc_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:94f30db2064d0d62776af04715a67f90d3fb852855c123eff51285122e296328_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:f58c4b24482819abd2cb67f30d3e1034d61dd85a043f76bc3f487e48941bd201_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:087c99d8838e9c2bd9a298fc320e954ea27203bbceaced070930c87f8a6581a8_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:94a7dea2910f1f440c42c143f930886b529b00a3d6a0eab08d06596f157977a9_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:e40d93d9d76fe8aa344905015d75ae13f94622f6e64de432b73af1930136f8de_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:e5244c1382ad165701a9e156618d8452d78e70675d33668cbdaf6d93f99a58f1_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:4275a746d036f4a674f2a41c584d1061160392818c0bf47f1e831034654c3c26_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:6cc5bc1fe92aecfb16bb3b6ccf833d06dc4484f8f7c9ffb7bedc3b3e49ace7b6_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:b1c91e9df4b0bb9437394b92444480d6417a39bb46c8474d8c8027ab01732ca4_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:b839e918e2b695ee22e954273f016c6ecdebc1f6048e538560b7162f21f9b83a_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:10d6f4417f63579b5ad0c2642e68049bf4b0cbc07393f05f5ccd6d93ad9b4551_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:b413d37ad30595df599c3aa8c7dbfad08acc6fa9a59e5300d6e66746d0ed7c92_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:ed69dc576cf04d5ed270a4a271aa89a5476b46d58a85c937f1c63d6680b08b73_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:f73c95e3c84116b5fb7320af22e69d252df69d4559f4ce7bdfd59f42902338c7_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:41e5ab72e781b1baa72b7158b2fb6af247c52042f828b496a15ff78adde413a3_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:498e05a439ac63b3a42882dd908d086078f697ff8c29dc2effedec8b26dd6521_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:5b0ca20174d1c6cdb3229bf625a906acf64509575c3092895e341ec301c5e92e_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:a214782e432451ca21a5042abd90bf44c57ed01563dfa4d1b81ef72f38ef2265_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:09758d53ef928e8740a95a31572462681a0f70c1c2a6eaa6a72a45fddf4538b7_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:5f4554659280456cba1fb0078dceb46964a9759f1c5ec0a8fa5d4a6f2bc4889f_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:8afff49beebd4fd88ccf687a421bca80c6d3295a38ef9fcef92ab2049d5f78db_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:be1e659b4f556e0dd65aa36141fa4ab940c5bdee4cf96e1425addb95330c9a09_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:1eb37889b6fd96e9bb95257e30918212f290caf50d9dbe76b6e46af067cdeda6_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:8705162c817322ffdabfee74c5fec3ce4f37be667f46634981cb66db0354ef10_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:b73e4453cb4a353d458ce8fe0641dfd1314ba383d836f1631e0cca5d9ffdca4e_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:fa557386c42c9144dcef16957fc0f02b6e631d037cb982c70a043ce11d760556_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:01f59a1b847d03122126fb3db62daa1e924d2bed5da9506061013800085c100b_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:10ed1c8ea558924ddfa1d3ab6a43d34a6edd16e09dac44d593487bc22b2fc7fc_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:94f30db2064d0d62776af04715a67f90d3fb852855c123eff51285122e296328_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:f58c4b24482819abd2cb67f30d3e1034d61dd85a043f76bc3f487e48941bd201_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:087c99d8838e9c2bd9a298fc320e954ea27203bbceaced070930c87f8a6581a8_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:94a7dea2910f1f440c42c143f930886b529b00a3d6a0eab08d06596f157977a9_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:e40d93d9d76fe8aa344905015d75ae13f94622f6e64de432b73af1930136f8de_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:e5244c1382ad165701a9e156618d8452d78e70675d33668cbdaf6d93f99a58f1_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "tar-fs: tar-fs symlink validation bypass"
    },
    {
      "cve": "CVE-2025-64718",
      "cwe": {
        "id": "CWE-1321",
        "name": "Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)"
      },
      "discovery_date": "2025-11-13T16:01:24.744054+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:4275a746d036f4a674f2a41c584d1061160392818c0bf47f1e831034654c3c26_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:6cc5bc1fe92aecfb16bb3b6ccf833d06dc4484f8f7c9ffb7bedc3b3e49ace7b6_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:b1c91e9df4b0bb9437394b92444480d6417a39bb46c8474d8c8027ab01732ca4_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:b839e918e2b695ee22e954273f016c6ecdebc1f6048e538560b7162f21f9b83a_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:41e5ab72e781b1baa72b7158b2fb6af247c52042f828b496a15ff78adde413a3_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:498e05a439ac63b3a42882dd908d086078f697ff8c29dc2effedec8b26dd6521_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:5b0ca20174d1c6cdb3229bf625a906acf64509575c3092895e341ec301c5e92e_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:a214782e432451ca21a5042abd90bf44c57ed01563dfa4d1b81ef72f38ef2265_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:09758d53ef928e8740a95a31572462681a0f70c1c2a6eaa6a72a45fddf4538b7_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:5f4554659280456cba1fb0078dceb46964a9759f1c5ec0a8fa5d4a6f2bc4889f_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:8afff49beebd4fd88ccf687a421bca80c6d3295a38ef9fcef92ab2049d5f78db_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:be1e659b4f556e0dd65aa36141fa4ab940c5bdee4cf96e1425addb95330c9a09_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:1eb37889b6fd96e9bb95257e30918212f290caf50d9dbe76b6e46af067cdeda6_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:8705162c817322ffdabfee74c5fec3ce4f37be667f46634981cb66db0354ef10_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:b73e4453cb4a353d458ce8fe0641dfd1314ba383d836f1631e0cca5d9ffdca4e_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:fa557386c42c9144dcef16957fc0f02b6e631d037cb982c70a043ce11d760556_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:01f59a1b847d03122126fb3db62daa1e924d2bed5da9506061013800085c100b_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:10ed1c8ea558924ddfa1d3ab6a43d34a6edd16e09dac44d593487bc22b2fc7fc_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:94f30db2064d0d62776af04715a67f90d3fb852855c123eff51285122e296328_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:f58c4b24482819abd2cb67f30d3e1034d61dd85a043f76bc3f487e48941bd201_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:087c99d8838e9c2bd9a298fc320e954ea27203bbceaced070930c87f8a6581a8_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:94a7dea2910f1f440c42c143f930886b529b00a3d6a0eab08d06596f157977a9_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:e40d93d9d76fe8aa344905015d75ae13f94622f6e64de432b73af1930136f8de_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:e5244c1382ad165701a9e156618d8452d78e70675d33668cbdaf6d93f99a58f1_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2414854"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A prototype pollution flaw has been discovered in the js-yaml npm library. It\u0027s possible for an attacker to modify the prototype of the result of a parsed yaml document via prototype pollution (__proto__). All users who parse untrusted yaml documents may be impacted.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "js-yaml: js-yaml prototype pollution in merge",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:10d6f4417f63579b5ad0c2642e68049bf4b0cbc07393f05f5ccd6d93ad9b4551_arm64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:b413d37ad30595df599c3aa8c7dbfad08acc6fa9a59e5300d6e66746d0ed7c92_amd64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:ed69dc576cf04d5ed270a4a271aa89a5476b46d58a85c937f1c63d6680b08b73_ppc64le",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:f73c95e3c84116b5fb7320af22e69d252df69d4559f4ce7bdfd59f42902338c7_s390x"
        ],
        "known_not_affected": [
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:4275a746d036f4a674f2a41c584d1061160392818c0bf47f1e831034654c3c26_ppc64le",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:6cc5bc1fe92aecfb16bb3b6ccf833d06dc4484f8f7c9ffb7bedc3b3e49ace7b6_arm64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:b1c91e9df4b0bb9437394b92444480d6417a39bb46c8474d8c8027ab01732ca4_s390x",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:b839e918e2b695ee22e954273f016c6ecdebc1f6048e538560b7162f21f9b83a_amd64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:41e5ab72e781b1baa72b7158b2fb6af247c52042f828b496a15ff78adde413a3_s390x",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:498e05a439ac63b3a42882dd908d086078f697ff8c29dc2effedec8b26dd6521_ppc64le",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:5b0ca20174d1c6cdb3229bf625a906acf64509575c3092895e341ec301c5e92e_arm64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:a214782e432451ca21a5042abd90bf44c57ed01563dfa4d1b81ef72f38ef2265_amd64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:09758d53ef928e8740a95a31572462681a0f70c1c2a6eaa6a72a45fddf4538b7_amd64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:5f4554659280456cba1fb0078dceb46964a9759f1c5ec0a8fa5d4a6f2bc4889f_s390x",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:8afff49beebd4fd88ccf687a421bca80c6d3295a38ef9fcef92ab2049d5f78db_ppc64le",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:be1e659b4f556e0dd65aa36141fa4ab940c5bdee4cf96e1425addb95330c9a09_arm64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:1eb37889b6fd96e9bb95257e30918212f290caf50d9dbe76b6e46af067cdeda6_arm64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:8705162c817322ffdabfee74c5fec3ce4f37be667f46634981cb66db0354ef10_ppc64le",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:b73e4453cb4a353d458ce8fe0641dfd1314ba383d836f1631e0cca5d9ffdca4e_s390x",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:fa557386c42c9144dcef16957fc0f02b6e631d037cb982c70a043ce11d760556_amd64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:01f59a1b847d03122126fb3db62daa1e924d2bed5da9506061013800085c100b_ppc64le",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:10ed1c8ea558924ddfa1d3ab6a43d34a6edd16e09dac44d593487bc22b2fc7fc_arm64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:94f30db2064d0d62776af04715a67f90d3fb852855c123eff51285122e296328_s390x",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:f58c4b24482819abd2cb67f30d3e1034d61dd85a043f76bc3f487e48941bd201_amd64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:087c99d8838e9c2bd9a298fc320e954ea27203bbceaced070930c87f8a6581a8_arm64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:94a7dea2910f1f440c42c143f930886b529b00a3d6a0eab08d06596f157977a9_ppc64le",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:e40d93d9d76fe8aa344905015d75ae13f94622f6e64de432b73af1930136f8de_amd64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:e5244c1382ad165701a9e156618d8452d78e70675d33668cbdaf6d93f99a58f1_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-64718"
        },
        {
          "category": "external",
          "summary": "RHBZ#2414854",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2414854"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-64718",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-64718"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-64718",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-64718"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/commit/383665ff4248ec2192d1274e934462bb30426879",
          "url": "https://github.com/nodeca/js-yaml/commit/383665ff4248ec2192d1274e934462bb30426879"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-mh29-5h37-fv8m",
          "url": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-mh29-5h37-fv8m"
        }
      ],
      "release_date": "2025-11-13T15:32:44.634000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-16T16:32:52+00:00",
          "details": "The container images provided by this update can be downloaded from the\nRed Hat container registry at registry.redhat.io using the \"podman pull\" command.",
          "product_ids": [
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:10d6f4417f63579b5ad0c2642e68049bf4b0cbc07393f05f5ccd6d93ad9b4551_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:b413d37ad30595df599c3aa8c7dbfad08acc6fa9a59e5300d6e66746d0ed7c92_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:ed69dc576cf04d5ed270a4a271aa89a5476b46d58a85c937f1c63d6680b08b73_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:f73c95e3c84116b5fb7320af22e69d252df69d4559f4ce7bdfd59f42902338c7_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:26411"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:4275a746d036f4a674f2a41c584d1061160392818c0bf47f1e831034654c3c26_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:6cc5bc1fe92aecfb16bb3b6ccf833d06dc4484f8f7c9ffb7bedc3b3e49ace7b6_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:b1c91e9df4b0bb9437394b92444480d6417a39bb46c8474d8c8027ab01732ca4_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:b839e918e2b695ee22e954273f016c6ecdebc1f6048e538560b7162f21f9b83a_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:10d6f4417f63579b5ad0c2642e68049bf4b0cbc07393f05f5ccd6d93ad9b4551_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:b413d37ad30595df599c3aa8c7dbfad08acc6fa9a59e5300d6e66746d0ed7c92_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:ed69dc576cf04d5ed270a4a271aa89a5476b46d58a85c937f1c63d6680b08b73_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:f73c95e3c84116b5fb7320af22e69d252df69d4559f4ce7bdfd59f42902338c7_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:41e5ab72e781b1baa72b7158b2fb6af247c52042f828b496a15ff78adde413a3_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:498e05a439ac63b3a42882dd908d086078f697ff8c29dc2effedec8b26dd6521_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:5b0ca20174d1c6cdb3229bf625a906acf64509575c3092895e341ec301c5e92e_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:a214782e432451ca21a5042abd90bf44c57ed01563dfa4d1b81ef72f38ef2265_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:09758d53ef928e8740a95a31572462681a0f70c1c2a6eaa6a72a45fddf4538b7_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:5f4554659280456cba1fb0078dceb46964a9759f1c5ec0a8fa5d4a6f2bc4889f_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:8afff49beebd4fd88ccf687a421bca80c6d3295a38ef9fcef92ab2049d5f78db_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:be1e659b4f556e0dd65aa36141fa4ab940c5bdee4cf96e1425addb95330c9a09_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:1eb37889b6fd96e9bb95257e30918212f290caf50d9dbe76b6e46af067cdeda6_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:8705162c817322ffdabfee74c5fec3ce4f37be667f46634981cb66db0354ef10_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:b73e4453cb4a353d458ce8fe0641dfd1314ba383d836f1631e0cca5d9ffdca4e_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:fa557386c42c9144dcef16957fc0f02b6e631d037cb982c70a043ce11d760556_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:01f59a1b847d03122126fb3db62daa1e924d2bed5da9506061013800085c100b_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:10ed1c8ea558924ddfa1d3ab6a43d34a6edd16e09dac44d593487bc22b2fc7fc_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:94f30db2064d0d62776af04715a67f90d3fb852855c123eff51285122e296328_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:f58c4b24482819abd2cb67f30d3e1034d61dd85a043f76bc3f487e48941bd201_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:087c99d8838e9c2bd9a298fc320e954ea27203bbceaced070930c87f8a6581a8_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:94a7dea2910f1f440c42c143f930886b529b00a3d6a0eab08d06596f157977a9_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:e40d93d9d76fe8aa344905015d75ae13f94622f6e64de432b73af1930136f8de_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:e5244c1382ad165701a9e156618d8452d78e70675d33668cbdaf6d93f99a58f1_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:4275a746d036f4a674f2a41c584d1061160392818c0bf47f1e831034654c3c26_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:6cc5bc1fe92aecfb16bb3b6ccf833d06dc4484f8f7c9ffb7bedc3b3e49ace7b6_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:b1c91e9df4b0bb9437394b92444480d6417a39bb46c8474d8c8027ab01732ca4_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:b839e918e2b695ee22e954273f016c6ecdebc1f6048e538560b7162f21f9b83a_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:10d6f4417f63579b5ad0c2642e68049bf4b0cbc07393f05f5ccd6d93ad9b4551_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:b413d37ad30595df599c3aa8c7dbfad08acc6fa9a59e5300d6e66746d0ed7c92_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:ed69dc576cf04d5ed270a4a271aa89a5476b46d58a85c937f1c63d6680b08b73_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:f73c95e3c84116b5fb7320af22e69d252df69d4559f4ce7bdfd59f42902338c7_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:41e5ab72e781b1baa72b7158b2fb6af247c52042f828b496a15ff78adde413a3_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:498e05a439ac63b3a42882dd908d086078f697ff8c29dc2effedec8b26dd6521_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:5b0ca20174d1c6cdb3229bf625a906acf64509575c3092895e341ec301c5e92e_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:a214782e432451ca21a5042abd90bf44c57ed01563dfa4d1b81ef72f38ef2265_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:09758d53ef928e8740a95a31572462681a0f70c1c2a6eaa6a72a45fddf4538b7_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:5f4554659280456cba1fb0078dceb46964a9759f1c5ec0a8fa5d4a6f2bc4889f_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:8afff49beebd4fd88ccf687a421bca80c6d3295a38ef9fcef92ab2049d5f78db_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:be1e659b4f556e0dd65aa36141fa4ab940c5bdee4cf96e1425addb95330c9a09_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:1eb37889b6fd96e9bb95257e30918212f290caf50d9dbe76b6e46af067cdeda6_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:8705162c817322ffdabfee74c5fec3ce4f37be667f46634981cb66db0354ef10_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:b73e4453cb4a353d458ce8fe0641dfd1314ba383d836f1631e0cca5d9ffdca4e_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:fa557386c42c9144dcef16957fc0f02b6e631d037cb982c70a043ce11d760556_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:01f59a1b847d03122126fb3db62daa1e924d2bed5da9506061013800085c100b_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:10ed1c8ea558924ddfa1d3ab6a43d34a6edd16e09dac44d593487bc22b2fc7fc_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:94f30db2064d0d62776af04715a67f90d3fb852855c123eff51285122e296328_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:f58c4b24482819abd2cb67f30d3e1034d61dd85a043f76bc3f487e48941bd201_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:087c99d8838e9c2bd9a298fc320e954ea27203bbceaced070930c87f8a6581a8_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:94a7dea2910f1f440c42c143f930886b529b00a3d6a0eab08d06596f157977a9_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:e40d93d9d76fe8aa344905015d75ae13f94622f6e64de432b73af1930136f8de_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:e5244c1382ad165701a9e156618d8452d78e70675d33668cbdaf6d93f99a58f1_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "js-yaml: js-yaml prototype pollution in merge"
    },
    {
      "cve": "CVE-2025-64756",
      "cwe": {
        "id": "CWE-78",
        "name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
      },
      "discovery_date": "2025-11-17T18:01:28.077927+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:4275a746d036f4a674f2a41c584d1061160392818c0bf47f1e831034654c3c26_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:6cc5bc1fe92aecfb16bb3b6ccf833d06dc4484f8f7c9ffb7bedc3b3e49ace7b6_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:b1c91e9df4b0bb9437394b92444480d6417a39bb46c8474d8c8027ab01732ca4_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:b839e918e2b695ee22e954273f016c6ecdebc1f6048e538560b7162f21f9b83a_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:41e5ab72e781b1baa72b7158b2fb6af247c52042f828b496a15ff78adde413a3_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:498e05a439ac63b3a42882dd908d086078f697ff8c29dc2effedec8b26dd6521_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:5b0ca20174d1c6cdb3229bf625a906acf64509575c3092895e341ec301c5e92e_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:a214782e432451ca21a5042abd90bf44c57ed01563dfa4d1b81ef72f38ef2265_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:09758d53ef928e8740a95a31572462681a0f70c1c2a6eaa6a72a45fddf4538b7_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:5f4554659280456cba1fb0078dceb46964a9759f1c5ec0a8fa5d4a6f2bc4889f_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:8afff49beebd4fd88ccf687a421bca80c6d3295a38ef9fcef92ab2049d5f78db_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:be1e659b4f556e0dd65aa36141fa4ab940c5bdee4cf96e1425addb95330c9a09_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:1eb37889b6fd96e9bb95257e30918212f290caf50d9dbe76b6e46af067cdeda6_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:8705162c817322ffdabfee74c5fec3ce4f37be667f46634981cb66db0354ef10_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:b73e4453cb4a353d458ce8fe0641dfd1314ba383d836f1631e0cca5d9ffdca4e_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:fa557386c42c9144dcef16957fc0f02b6e631d037cb982c70a043ce11d760556_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:01f59a1b847d03122126fb3db62daa1e924d2bed5da9506061013800085c100b_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:10ed1c8ea558924ddfa1d3ab6a43d34a6edd16e09dac44d593487bc22b2fc7fc_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:94f30db2064d0d62776af04715a67f90d3fb852855c123eff51285122e296328_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:f58c4b24482819abd2cb67f30d3e1034d61dd85a043f76bc3f487e48941bd201_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:087c99d8838e9c2bd9a298fc320e954ea27203bbceaced070930c87f8a6581a8_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:94a7dea2910f1f440c42c143f930886b529b00a3d6a0eab08d06596f157977a9_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:e40d93d9d76fe8aa344905015d75ae13f94622f6e64de432b73af1930136f8de_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:e5244c1382ad165701a9e156618d8452d78e70675d33668cbdaf6d93f99a58f1_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2415451"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in glob. This vulnerability allows arbitrary command execution via processing files with malicious names when the glob command-line interface (CLI) is used with the -c/--cmd option, enabling shell metacharacters to trigger command injection.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "glob: glob: Command Injection Vulnerability via Malicious Filenames",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw in glob allows arbitrary command execution when the `glob` command-line interface is used with the `-c/--cmd` option to process files with malicious names. The vulnerability is triggered by shell metacharacters in filenames, leading to command injection. The glob CLI tool utilizes the -c option to execute shell commands over the files which matched the searched pattern by using the shell:true parameter when creating the subprocess which will further execute the command informed via \u0027-c\u0027 option, this parameter allows the shell meta characters to be used and processed when executing the command. Given that information glob misses to sanitize the file name to eliminate such characters and expressions from the filename, leading to code execution as when performing the shell expansion such characters will be interpreted as shell commands.\n\nTo exploit this vulnerability the targeted system should run the glob CLI over a file with a maliciously crafted filename, additionally the attacker needs to have enough permission to create such file or trick the user to download and process the required file with the glob CLI.\n\nThis flaw is present in the command line interface of the nodejs-glob package. When the package is used by npm, the command line interface is not used at all, so it cannot be triggered. However, the command line interface implementation is still present on the system, but not directly exposed to the user\u0027s $PATH. To reflect this condition, nodejs packages have been rated with a low severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:10d6f4417f63579b5ad0c2642e68049bf4b0cbc07393f05f5ccd6d93ad9b4551_arm64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:b413d37ad30595df599c3aa8c7dbfad08acc6fa9a59e5300d6e66746d0ed7c92_amd64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:ed69dc576cf04d5ed270a4a271aa89a5476b46d58a85c937f1c63d6680b08b73_ppc64le",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:f73c95e3c84116b5fb7320af22e69d252df69d4559f4ce7bdfd59f42902338c7_s390x"
        ],
        "known_not_affected": [
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:4275a746d036f4a674f2a41c584d1061160392818c0bf47f1e831034654c3c26_ppc64le",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:6cc5bc1fe92aecfb16bb3b6ccf833d06dc4484f8f7c9ffb7bedc3b3e49ace7b6_arm64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:b1c91e9df4b0bb9437394b92444480d6417a39bb46c8474d8c8027ab01732ca4_s390x",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:b839e918e2b695ee22e954273f016c6ecdebc1f6048e538560b7162f21f9b83a_amd64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:41e5ab72e781b1baa72b7158b2fb6af247c52042f828b496a15ff78adde413a3_s390x",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:498e05a439ac63b3a42882dd908d086078f697ff8c29dc2effedec8b26dd6521_ppc64le",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:5b0ca20174d1c6cdb3229bf625a906acf64509575c3092895e341ec301c5e92e_arm64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:a214782e432451ca21a5042abd90bf44c57ed01563dfa4d1b81ef72f38ef2265_amd64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:09758d53ef928e8740a95a31572462681a0f70c1c2a6eaa6a72a45fddf4538b7_amd64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:5f4554659280456cba1fb0078dceb46964a9759f1c5ec0a8fa5d4a6f2bc4889f_s390x",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:8afff49beebd4fd88ccf687a421bca80c6d3295a38ef9fcef92ab2049d5f78db_ppc64le",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:be1e659b4f556e0dd65aa36141fa4ab940c5bdee4cf96e1425addb95330c9a09_arm64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:1eb37889b6fd96e9bb95257e30918212f290caf50d9dbe76b6e46af067cdeda6_arm64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:8705162c817322ffdabfee74c5fec3ce4f37be667f46634981cb66db0354ef10_ppc64le",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:b73e4453cb4a353d458ce8fe0641dfd1314ba383d836f1631e0cca5d9ffdca4e_s390x",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:fa557386c42c9144dcef16957fc0f02b6e631d037cb982c70a043ce11d760556_amd64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:01f59a1b847d03122126fb3db62daa1e924d2bed5da9506061013800085c100b_ppc64le",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:10ed1c8ea558924ddfa1d3ab6a43d34a6edd16e09dac44d593487bc22b2fc7fc_arm64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:94f30db2064d0d62776af04715a67f90d3fb852855c123eff51285122e296328_s390x",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:f58c4b24482819abd2cb67f30d3e1034d61dd85a043f76bc3f487e48941bd201_amd64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:087c99d8838e9c2bd9a298fc320e954ea27203bbceaced070930c87f8a6581a8_arm64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:94a7dea2910f1f440c42c143f930886b529b00a3d6a0eab08d06596f157977a9_ppc64le",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:e40d93d9d76fe8aa344905015d75ae13f94622f6e64de432b73af1930136f8de_amd64",
          "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:e5244c1382ad165701a9e156618d8452d78e70675d33668cbdaf6d93f99a58f1_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-64756"
        },
        {
          "category": "external",
          "summary": "RHBZ#2415451",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2415451"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-64756",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-64756"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-64756",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-64756"
        },
        {
          "category": "external",
          "summary": "https://github.com/isaacs/node-glob/commit/47473c046b91c67269df7a66eab782a6c2716146",
          "url": "https://github.com/isaacs/node-glob/commit/47473c046b91c67269df7a66eab782a6c2716146"
        },
        {
          "category": "external",
          "summary": "https://github.com/isaacs/node-glob/security/advisories/GHSA-5j98-mcp5-4vw2",
          "url": "https://github.com/isaacs/node-glob/security/advisories/GHSA-5j98-mcp5-4vw2"
        }
      ],
      "release_date": "2025-11-17T17:29:08.029000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-16T16:32:52+00:00",
          "details": "The container images provided by this update can be downloaded from the\nRed Hat container registry at registry.redhat.io using the \"podman pull\" command.",
          "product_ids": [
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:10d6f4417f63579b5ad0c2642e68049bf4b0cbc07393f05f5ccd6d93ad9b4551_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:b413d37ad30595df599c3aa8c7dbfad08acc6fa9a59e5300d6e66746d0ed7c92_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:ed69dc576cf04d5ed270a4a271aa89a5476b46d58a85c937f1c63d6680b08b73_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:f73c95e3c84116b5fb7320af22e69d252df69d4559f4ce7bdfd59f42902338c7_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:26411"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, avoid using the `glob` command-line interface with the `-c` or `--cmd` option when processing filenames from untrusted sources. If programmatic use of `glob` is necessary, ensure that filenames are thoroughly sanitized before being passed to commands executed with shell interpretation enabled.",
          "product_ids": [
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:4275a746d036f4a674f2a41c584d1061160392818c0bf47f1e831034654c3c26_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:6cc5bc1fe92aecfb16bb3b6ccf833d06dc4484f8f7c9ffb7bedc3b3e49ace7b6_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:b1c91e9df4b0bb9437394b92444480d6417a39bb46c8474d8c8027ab01732ca4_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:b839e918e2b695ee22e954273f016c6ecdebc1f6048e538560b7162f21f9b83a_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:10d6f4417f63579b5ad0c2642e68049bf4b0cbc07393f05f5ccd6d93ad9b4551_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:b413d37ad30595df599c3aa8c7dbfad08acc6fa9a59e5300d6e66746d0ed7c92_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:ed69dc576cf04d5ed270a4a271aa89a5476b46d58a85c937f1c63d6680b08b73_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:f73c95e3c84116b5fb7320af22e69d252df69d4559f4ce7bdfd59f42902338c7_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:41e5ab72e781b1baa72b7158b2fb6af247c52042f828b496a15ff78adde413a3_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:498e05a439ac63b3a42882dd908d086078f697ff8c29dc2effedec8b26dd6521_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:5b0ca20174d1c6cdb3229bf625a906acf64509575c3092895e341ec301c5e92e_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:a214782e432451ca21a5042abd90bf44c57ed01563dfa4d1b81ef72f38ef2265_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:09758d53ef928e8740a95a31572462681a0f70c1c2a6eaa6a72a45fddf4538b7_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:5f4554659280456cba1fb0078dceb46964a9759f1c5ec0a8fa5d4a6f2bc4889f_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:8afff49beebd4fd88ccf687a421bca80c6d3295a38ef9fcef92ab2049d5f78db_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:be1e659b4f556e0dd65aa36141fa4ab940c5bdee4cf96e1425addb95330c9a09_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:1eb37889b6fd96e9bb95257e30918212f290caf50d9dbe76b6e46af067cdeda6_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:8705162c817322ffdabfee74c5fec3ce4f37be667f46634981cb66db0354ef10_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:b73e4453cb4a353d458ce8fe0641dfd1314ba383d836f1631e0cca5d9ffdca4e_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:fa557386c42c9144dcef16957fc0f02b6e631d037cb982c70a043ce11d760556_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:01f59a1b847d03122126fb3db62daa1e924d2bed5da9506061013800085c100b_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:10ed1c8ea558924ddfa1d3ab6a43d34a6edd16e09dac44d593487bc22b2fc7fc_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:94f30db2064d0d62776af04715a67f90d3fb852855c123eff51285122e296328_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:f58c4b24482819abd2cb67f30d3e1034d61dd85a043f76bc3f487e48941bd201_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:087c99d8838e9c2bd9a298fc320e954ea27203bbceaced070930c87f8a6581a8_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:94a7dea2910f1f440c42c143f930886b529b00a3d6a0eab08d06596f157977a9_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:e40d93d9d76fe8aa344905015d75ae13f94622f6e64de432b73af1930136f8de_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:e5244c1382ad165701a9e156618d8452d78e70675d33668cbdaf6d93f99a58f1_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:4275a746d036f4a674f2a41c584d1061160392818c0bf47f1e831034654c3c26_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:6cc5bc1fe92aecfb16bb3b6ccf833d06dc4484f8f7c9ffb7bedc3b3e49ace7b6_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:b1c91e9df4b0bb9437394b92444480d6417a39bb46c8474d8c8027ab01732ca4_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/alloy-rhel10@sha256:b839e918e2b695ee22e954273f016c6ecdebc1f6048e538560b7162f21f9b83a_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:10d6f4417f63579b5ad0c2642e68049bf4b0cbc07393f05f5ccd6d93ad9b4551_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:b413d37ad30595df599c3aa8c7dbfad08acc6fa9a59e5300d6e66746d0ed7c92_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:ed69dc576cf04d5ed270a4a271aa89a5476b46d58a85c937f1c63d6680b08b73_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/grafana-rhel10@sha256:f73c95e3c84116b5fb7320af22e69d252df69d4559f4ce7bdfd59f42902338c7_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:41e5ab72e781b1baa72b7158b2fb6af247c52042f828b496a15ff78adde413a3_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:498e05a439ac63b3a42882dd908d086078f697ff8c29dc2effedec8b26dd6521_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:5b0ca20174d1c6cdb3229bf625a906acf64509575c3092895e341ec301c5e92e_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/keepalived-rhel10@sha256:a214782e432451ca21a5042abd90bf44c57ed01563dfa4d1b81ef72f38ef2265_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:09758d53ef928e8740a95a31572462681a0f70c1c2a6eaa6a72a45fddf4538b7_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:5f4554659280456cba1fb0078dceb46964a9759f1c5ec0a8fa5d4a6f2bc4889f_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:8afff49beebd4fd88ccf687a421bca80c6d3295a38ef9fcef92ab2049d5f78db_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:be1e659b4f556e0dd65aa36141fa4ab940c5bdee4cf96e1425addb95330c9a09_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:1eb37889b6fd96e9bb95257e30918212f290caf50d9dbe76b6e46af067cdeda6_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:8705162c817322ffdabfee74c5fec3ce4f37be667f46634981cb66db0354ef10_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:b73e4453cb4a353d458ce8fe0641dfd1314ba383d836f1631e0cca5d9ffdca4e_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-9-rhel9@sha256:fa557386c42c9144dcef16957fc0f02b6e631d037cb982c70a043ce11d760556_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:01f59a1b847d03122126fb3db62daa1e924d2bed5da9506061013800085c100b_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:10ed1c8ea558924ddfa1d3ab6a43d34a6edd16e09dac44d593487bc22b2fc7fc_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:94f30db2064d0d62776af04715a67f90d3fb852855c123eff51285122e296328_s390x",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:f58c4b24482819abd2cb67f30d3e1034d61dd85a043f76bc3f487e48941bd201_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:087c99d8838e9c2bd9a298fc320e954ea27203bbceaced070930c87f8a6581a8_arm64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:94a7dea2910f1f440c42c143f930886b529b00a3d6a0eab08d06596f157977a9_ppc64le",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:e40d93d9d76fe8aa344905015d75ae13f94622f6e64de432b73af1930136f8de_amd64",
            "Red Hat Ceph Storage 9.0:registry.redhat.io/rhceph/snmp-notifier-rhel10@sha256:e5244c1382ad165701a9e156618d8452d78e70675d33668cbdaf6d93f99a58f1_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "glob: glob: Command Injection Vulnerability via Malicious Filenames"
    }
  ]
}