{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Logging for Red Hat OpenShift - 6.5.2",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat OpenShift Logging 6.5.2 is a cluster-wide logging solution for OpenShift that collects and manages applications, infrastructure, and audit logs.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:56340",
        "url": "https://access.redhat.com/errata/RHSA-2026:56340"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-25681",
        "url": "https://access.redhat.com/security/cve/CVE-2026-25681"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-27136",
        "url": "https://access.redhat.com/security/cve/CVE-2026-27136"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-32281",
        "url": "https://access.redhat.com/security/cve/CVE-2026-32281"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-32282",
        "url": "https://access.redhat.com/security/cve/CVE-2026-32282"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
        "url": "https://access.redhat.com/security/cve/CVE-2026-33811"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-33813",
        "url": "https://access.redhat.com/security/cve/CVE-2026-33813"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
        "url": "https://access.redhat.com/security/cve/CVE-2026-39820"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
        "url": "https://access.redhat.com/security/cve/CVE-2026-39821"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-42151",
        "url": "https://access.redhat.com/security/cve/CVE-2026-42151"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-42154",
        "url": "https://access.redhat.com/security/cve/CVE-2026-42154"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
        "url": "https://access.redhat.com/security/cve/CVE-2026-42499"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-42502",
        "url": "https://access.redhat.com/security/cve/CVE-2026-42502"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-42504",
        "url": "https://access.redhat.com/security/cve/CVE-2026-42504"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56852",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56852"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_56340.json"
      }
    ],
    "title": "Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.5.2",
    "tracking": {
      "current_release_date": "2026-08-19T13:07:58+00:00",
      "generator": {
        "date": "2026-08-19T13:07:58+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.16"
        }
      },
      "id": "RHSA-2026:56340",
      "initial_release_date": "2026-08-18T16:40:44+00:00",
      "revision_history": [
        {
          "date": "2026-08-18T16:40:44+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-08-18T16:40:53+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-08-19T13:07:58+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Logging Subsystem for Red Hat OpenShift 6.5",
                "product": {
                  "name": "Logging Subsystem for Red Hat OpenShift 6.5",
                  "product_id": "Logging Subsystem for Red Hat OpenShift 6.5",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:logging:6.5::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Logging Subsystem for Red Hat OpenShift"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d9bc0d110bbc7b7ec8a2401f34cde12e470980086bb04fc532a9885917c06b7f_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d9bc0d110bbc7b7ec8a2401f34cde12e470980086bb04fc532a9885917c06b7f_amd64",
                  "product_id": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d9bc0d110bbc7b7ec8a2401f34cde12e470980086bb04fc532a9885917c06b7f_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cluster-logging-rhel9-operator@sha256%3Ad9bc0d110bbc7b7ec8a2401f34cde12e470980086bb04fc532a9885917c06b7f?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator\u0026tag=1786658378"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:40c83c7127b6b90b9984b3c73b3cbad1c3a8f7af3dc792e5320d6defb9eb22e0_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:40c83c7127b6b90b9984b3c73b3cbad1c3a8f7af3dc792e5320d6defb9eb22e0_amd64",
                  "product_id": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:40c83c7127b6b90b9984b3c73b3cbad1c3a8f7af3dc792e5320d6defb9eb22e0_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cluster-logging-operator-bundle@sha256%3A40c83c7127b6b90b9984b3c73b3cbad1c3a8f7af3dc792e5320d6defb9eb22e0?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-operator-bundle\u0026tag=1786659639"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:01271821684bdb4791a1e757092e3799247ac91519f8516599c7cf9080407076_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:01271821684bdb4791a1e757092e3799247ac91519f8516599c7cf9080407076_amd64",
                  "product_id": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:01271821684bdb4791a1e757092e3799247ac91519f8516599c7cf9080407076_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/eventrouter-rhel9@sha256%3A01271821684bdb4791a1e757092e3799247ac91519f8516599c7cf9080407076?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel9\u0026tag=1786645107"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:15b1be865c1d4df2fd1171acb46922ba864555b18dfc71febd372e11a5d0eb8e_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:15b1be865c1d4df2fd1171acb46922ba864555b18dfc71febd372e11a5d0eb8e_amd64",
                  "product_id": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:15b1be865c1d4df2fd1171acb46922ba864555b18dfc71febd372e11a5d0eb8e_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/log-file-metric-exporter-rhel9@sha256%3A15b1be865c1d4df2fd1171acb46922ba864555b18dfc71febd372e11a5d0eb8e?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9\u0026tag=1786645099"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:17a67ac2934041f996b19574bbeffa9e56d8486969785ae219215384cfd4162f_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:17a67ac2934041f996b19574bbeffa9e56d8486969785ae219215384cfd4162f_amd64",
                  "product_id": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:17a67ac2934041f996b19574bbeffa9e56d8486969785ae219215384cfd4162f_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/logging-loki-rhel9@sha256%3A17a67ac2934041f996b19574bbeffa9e56d8486969785ae219215384cfd4162f?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/logging-loki-rhel9\u0026tag=1786645248"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2a0befa5c4dbcb56ef33f46ccdb27d5e02f8f5facdbf2fa0b9c6e6dd53a476e_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2a0befa5c4dbcb56ef33f46ccdb27d5e02f8f5facdbf2fa0b9c6e6dd53a476e_amd64",
                  "product_id": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2a0befa5c4dbcb56ef33f46ccdb27d5e02f8f5facdbf2fa0b9c6e6dd53a476e_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/loki-rhel9-operator@sha256%3Ae2a0befa5c4dbcb56ef33f46ccdb27d5e02f8f5facdbf2fa0b9c6e6dd53a476e?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/loki-rhel9-operator\u0026tag=1786645138"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:21c630e1de77a6e18b0b774ebfc5ccef2191fef60da0c7914d0a81d5be236ea3_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:21c630e1de77a6e18b0b774ebfc5ccef2191fef60da0c7914d0a81d5be236ea3_amd64",
                  "product_id": "registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:21c630e1de77a6e18b0b774ebfc5ccef2191fef60da0c7914d0a81d5be236ea3_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/loki-operator-bundle@sha256%3A21c630e1de77a6e18b0b774ebfc5ccef2191fef60da0c7914d0a81d5be236ea3?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/loki-operator-bundle\u0026tag=1786648457"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f49b88b70726cb222fa43685d3a6704ccd8778a2a82b7c5c4aee4b47c54d3bcb_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f49b88b70726cb222fa43685d3a6704ccd8778a2a82b7c5c4aee4b47c54d3bcb_amd64",
                  "product_id": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f49b88b70726cb222fa43685d3a6704ccd8778a2a82b7c5c4aee4b47c54d3bcb_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/lokistack-gateway-rhel9@sha256%3Af49b88b70726cb222fa43685d3a6704ccd8778a2a82b7c5c4aee4b47c54d3bcb?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/lokistack-gateway-rhel9\u0026tag=1786645114"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:deefcb8674d1899581331ba7899baedb7f9c5355b2b3e4f11b5414b1ae58a8be_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:deefcb8674d1899581331ba7899baedb7f9c5355b2b3e4f11b5414b1ae58a8be_amd64",
                  "product_id": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:deefcb8674d1899581331ba7899baedb7f9c5355b2b3e4f11b5414b1ae58a8be_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/opa-openshift-rhel9@sha256%3Adeefcb8674d1899581331ba7899baedb7f9c5355b2b3e4f11b5414b1ae58a8be?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/opa-openshift-rhel9\u0026tag=1786645109"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:01853cca36a1042f42860bb89048c4a09de76b2cfac412fd78e38fd74376ca39_amd64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:01853cca36a1042f42860bb89048c4a09de76b2cfac412fd78e38fd74376ca39_amd64",
                  "product_id": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:01853cca36a1042f42860bb89048c4a09de76b2cfac412fd78e38fd74376ca39_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/vector-rhel9@sha256%3A01853cca36a1042f42860bb89048c4a09de76b2cfac412fd78e38fd74376ca39?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/vector-rhel9\u0026tag=1786645392"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:93e605c4231903b7a73e7578f8977a5c6029c767ab801f29b726d2e6ff290feb_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:93e605c4231903b7a73e7578f8977a5c6029c767ab801f29b726d2e6ff290feb_arm64",
                  "product_id": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:93e605c4231903b7a73e7578f8977a5c6029c767ab801f29b726d2e6ff290feb_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cluster-logging-rhel9-operator@sha256%3A93e605c4231903b7a73e7578f8977a5c6029c767ab801f29b726d2e6ff290feb?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator\u0026tag=1786658378"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:b881afc31c6e287608699dfc9d38bf38ff3616b2b133cc4726f0060ce99b16de_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:b881afc31c6e287608699dfc9d38bf38ff3616b2b133cc4726f0060ce99b16de_arm64",
                  "product_id": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:b881afc31c6e287608699dfc9d38bf38ff3616b2b133cc4726f0060ce99b16de_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/eventrouter-rhel9@sha256%3Ab881afc31c6e287608699dfc9d38bf38ff3616b2b133cc4726f0060ce99b16de?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel9\u0026tag=1786645107"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ceb52082d9002ba1762e6653bc39b4253f05a7cd58a42c664c7a658e6133a7e8_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ceb52082d9002ba1762e6653bc39b4253f05a7cd58a42c664c7a658e6133a7e8_arm64",
                  "product_id": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ceb52082d9002ba1762e6653bc39b4253f05a7cd58a42c664c7a658e6133a7e8_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/log-file-metric-exporter-rhel9@sha256%3Aceb52082d9002ba1762e6653bc39b4253f05a7cd58a42c664c7a658e6133a7e8?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9\u0026tag=1786645099"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1c687dff9904d440a9efefc95bd82ac1cf10df5c030ee8a3164621bc84e447fc_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1c687dff9904d440a9efefc95bd82ac1cf10df5c030ee8a3164621bc84e447fc_arm64",
                  "product_id": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1c687dff9904d440a9efefc95bd82ac1cf10df5c030ee8a3164621bc84e447fc_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/logging-loki-rhel9@sha256%3A1c687dff9904d440a9efefc95bd82ac1cf10df5c030ee8a3164621bc84e447fc?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/logging-loki-rhel9\u0026tag=1786645248"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:902fe34ead11574878df61323db6ac53f3ad55d13d40f72b8d514ea0356e1a81_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:902fe34ead11574878df61323db6ac53f3ad55d13d40f72b8d514ea0356e1a81_arm64",
                  "product_id": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:902fe34ead11574878df61323db6ac53f3ad55d13d40f72b8d514ea0356e1a81_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/loki-rhel9-operator@sha256%3A902fe34ead11574878df61323db6ac53f3ad55d13d40f72b8d514ea0356e1a81?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/loki-rhel9-operator\u0026tag=1786645138"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:de70e3309c799110feacba1b6d64bf153818e21790500da6ea75c05f276bedcd_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:de70e3309c799110feacba1b6d64bf153818e21790500da6ea75c05f276bedcd_arm64",
                  "product_id": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:de70e3309c799110feacba1b6d64bf153818e21790500da6ea75c05f276bedcd_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/lokistack-gateway-rhel9@sha256%3Ade70e3309c799110feacba1b6d64bf153818e21790500da6ea75c05f276bedcd?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/lokistack-gateway-rhel9\u0026tag=1786645114"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:66b2f52b2abd9e3a1fcd1ef4aa926a0f8613730918a2b7743ce61d1ce9b103c7_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:66b2f52b2abd9e3a1fcd1ef4aa926a0f8613730918a2b7743ce61d1ce9b103c7_arm64",
                  "product_id": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:66b2f52b2abd9e3a1fcd1ef4aa926a0f8613730918a2b7743ce61d1ce9b103c7_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/opa-openshift-rhel9@sha256%3A66b2f52b2abd9e3a1fcd1ef4aa926a0f8613730918a2b7743ce61d1ce9b103c7?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/opa-openshift-rhel9\u0026tag=1786645109"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:527395e13fedf00d5ffa4a2c70602cab213ff9c826940a529150d6b1df4f7395_arm64",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:527395e13fedf00d5ffa4a2c70602cab213ff9c826940a529150d6b1df4f7395_arm64",
                  "product_id": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:527395e13fedf00d5ffa4a2c70602cab213ff9c826940a529150d6b1df4f7395_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/vector-rhel9@sha256%3A527395e13fedf00d5ffa4a2c70602cab213ff9c826940a529150d6b1df4f7395?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/vector-rhel9\u0026tag=1786645392"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ee6505e36b31ecc38b080c2e56b7b26afd3c7db9b30d17947e6bcb6cf7f0e44e_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ee6505e36b31ecc38b080c2e56b7b26afd3c7db9b30d17947e6bcb6cf7f0e44e_s390x",
                  "product_id": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ee6505e36b31ecc38b080c2e56b7b26afd3c7db9b30d17947e6bcb6cf7f0e44e_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cluster-logging-rhel9-operator@sha256%3Aee6505e36b31ecc38b080c2e56b7b26afd3c7db9b30d17947e6bcb6cf7f0e44e?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator\u0026tag=1786658378"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:958178be4fc3798cdd531660e14514c370ac334b8a27a31a8f08db3244f17341_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:958178be4fc3798cdd531660e14514c370ac334b8a27a31a8f08db3244f17341_s390x",
                  "product_id": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:958178be4fc3798cdd531660e14514c370ac334b8a27a31a8f08db3244f17341_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/eventrouter-rhel9@sha256%3A958178be4fc3798cdd531660e14514c370ac334b8a27a31a8f08db3244f17341?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel9\u0026tag=1786645107"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8d334ebdf403e2a15a664c1960044c6852f3e00b55ce2f2e808f6213ae70e00f_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8d334ebdf403e2a15a664c1960044c6852f3e00b55ce2f2e808f6213ae70e00f_s390x",
                  "product_id": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8d334ebdf403e2a15a664c1960044c6852f3e00b55ce2f2e808f6213ae70e00f_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/log-file-metric-exporter-rhel9@sha256%3A8d334ebdf403e2a15a664c1960044c6852f3e00b55ce2f2e808f6213ae70e00f?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9\u0026tag=1786645099"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:18ea59f76a1ddd747712fbb3314f55cfdefb4e12a39ad9f0d22c26d25e8b04b4_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:18ea59f76a1ddd747712fbb3314f55cfdefb4e12a39ad9f0d22c26d25e8b04b4_s390x",
                  "product_id": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:18ea59f76a1ddd747712fbb3314f55cfdefb4e12a39ad9f0d22c26d25e8b04b4_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/logging-loki-rhel9@sha256%3A18ea59f76a1ddd747712fbb3314f55cfdefb4e12a39ad9f0d22c26d25e8b04b4?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/logging-loki-rhel9\u0026tag=1786645248"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bff77adab78f874b962324a9674157383dfe4570309d24c7b2a6acebead62a39_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bff77adab78f874b962324a9674157383dfe4570309d24c7b2a6acebead62a39_s390x",
                  "product_id": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bff77adab78f874b962324a9674157383dfe4570309d24c7b2a6acebead62a39_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/loki-rhel9-operator@sha256%3Abff77adab78f874b962324a9674157383dfe4570309d24c7b2a6acebead62a39?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/loki-rhel9-operator\u0026tag=1786645138"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:9ffa7e5a2ed3f92a6eb30792dc878add38b41f7ce5ca03a6f1a2c8b12300070a_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:9ffa7e5a2ed3f92a6eb30792dc878add38b41f7ce5ca03a6f1a2c8b12300070a_s390x",
                  "product_id": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:9ffa7e5a2ed3f92a6eb30792dc878add38b41f7ce5ca03a6f1a2c8b12300070a_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/lokistack-gateway-rhel9@sha256%3A9ffa7e5a2ed3f92a6eb30792dc878add38b41f7ce5ca03a6f1a2c8b12300070a?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/lokistack-gateway-rhel9\u0026tag=1786645114"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:f980269a8879cd0dced67eec6e2ec9f708b347e4d49981fafccc6c795f73e4cf_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:f980269a8879cd0dced67eec6e2ec9f708b347e4d49981fafccc6c795f73e4cf_s390x",
                  "product_id": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:f980269a8879cd0dced67eec6e2ec9f708b347e4d49981fafccc6c795f73e4cf_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/opa-openshift-rhel9@sha256%3Af980269a8879cd0dced67eec6e2ec9f708b347e4d49981fafccc6c795f73e4cf?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/opa-openshift-rhel9\u0026tag=1786645109"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:4970ca74fcbc6aaf9f64812f37e31426444d041345541d498b12a819cbe29299_s390x",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:4970ca74fcbc6aaf9f64812f37e31426444d041345541d498b12a819cbe29299_s390x",
                  "product_id": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:4970ca74fcbc6aaf9f64812f37e31426444d041345541d498b12a819cbe29299_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/vector-rhel9@sha256%3A4970ca74fcbc6aaf9f64812f37e31426444d041345541d498b12a819cbe29299?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/vector-rhel9\u0026tag=1786645392"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5b4e3a421f13bd33d03185f4071b3e633767eb06a9875a02ca793d43fd1514c7_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5b4e3a421f13bd33d03185f4071b3e633767eb06a9875a02ca793d43fd1514c7_ppc64le",
                  "product_id": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5b4e3a421f13bd33d03185f4071b3e633767eb06a9875a02ca793d43fd1514c7_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cluster-logging-rhel9-operator@sha256%3A5b4e3a421f13bd33d03185f4071b3e633767eb06a9875a02ca793d43fd1514c7?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator\u0026tag=1786658378"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:c237813ec28c79232f1f8d5bb2f875157323d10ddceddf3f722cd885c3c5c4d5_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:c237813ec28c79232f1f8d5bb2f875157323d10ddceddf3f722cd885c3c5c4d5_ppc64le",
                  "product_id": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:c237813ec28c79232f1f8d5bb2f875157323d10ddceddf3f722cd885c3c5c4d5_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/eventrouter-rhel9@sha256%3Ac237813ec28c79232f1f8d5bb2f875157323d10ddceddf3f722cd885c3c5c4d5?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel9\u0026tag=1786645107"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:55c2e8cbb4c7e89ed719c136d401c1fa49198e4a98a2dfe78c5eacb5ee2cadc8_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:55c2e8cbb4c7e89ed719c136d401c1fa49198e4a98a2dfe78c5eacb5ee2cadc8_ppc64le",
                  "product_id": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:55c2e8cbb4c7e89ed719c136d401c1fa49198e4a98a2dfe78c5eacb5ee2cadc8_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/log-file-metric-exporter-rhel9@sha256%3A55c2e8cbb4c7e89ed719c136d401c1fa49198e4a98a2dfe78c5eacb5ee2cadc8?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9\u0026tag=1786645099"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:fad58cb6ca31afd96f8ef741cad73c4328c24361dfad022848c227f129c5b4b5_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:fad58cb6ca31afd96f8ef741cad73c4328c24361dfad022848c227f129c5b4b5_ppc64le",
                  "product_id": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:fad58cb6ca31afd96f8ef741cad73c4328c24361dfad022848c227f129c5b4b5_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/logging-loki-rhel9@sha256%3Afad58cb6ca31afd96f8ef741cad73c4328c24361dfad022848c227f129c5b4b5?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/logging-loki-rhel9\u0026tag=1786645248"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:51538cb4de3a2767509d5a7869f9a63a054416e7163c38714bce9bd83da1b619_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:51538cb4de3a2767509d5a7869f9a63a054416e7163c38714bce9bd83da1b619_ppc64le",
                  "product_id": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:51538cb4de3a2767509d5a7869f9a63a054416e7163c38714bce9bd83da1b619_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/loki-rhel9-operator@sha256%3A51538cb4de3a2767509d5a7869f9a63a054416e7163c38714bce9bd83da1b619?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/loki-rhel9-operator\u0026tag=1786645138"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a6a946b8e424db855be70e94c1cab3e5dcf56be8b5caec8d48b3b4579310a25a_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a6a946b8e424db855be70e94c1cab3e5dcf56be8b5caec8d48b3b4579310a25a_ppc64le",
                  "product_id": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a6a946b8e424db855be70e94c1cab3e5dcf56be8b5caec8d48b3b4579310a25a_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/lokistack-gateway-rhel9@sha256%3Aa6a946b8e424db855be70e94c1cab3e5dcf56be8b5caec8d48b3b4579310a25a?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/lokistack-gateway-rhel9\u0026tag=1786645114"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:11caeb0f6c63f361d12e2c223aa0e1e363c79d8495a008f5b996184dfdd15d57_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:11caeb0f6c63f361d12e2c223aa0e1e363c79d8495a008f5b996184dfdd15d57_ppc64le",
                  "product_id": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:11caeb0f6c63f361d12e2c223aa0e1e363c79d8495a008f5b996184dfdd15d57_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/opa-openshift-rhel9@sha256%3A11caeb0f6c63f361d12e2c223aa0e1e363c79d8495a008f5b996184dfdd15d57?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/opa-openshift-rhel9\u0026tag=1786645109"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:b3ca415e883c09cf8f42f2b1b63ddf007fae7ac183f2185201efecf48489636e_ppc64le",
                "product": {
                  "name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:b3ca415e883c09cf8f42f2b1b63ddf007fae7ac183f2185201efecf48489636e_ppc64le",
                  "product_id": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:b3ca415e883c09cf8f42f2b1b63ddf007fae7ac183f2185201efecf48489636e_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/vector-rhel9@sha256%3Ab3ca415e883c09cf8f42f2b1b63ddf007fae7ac183f2185201efecf48489636e?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/vector-rhel9\u0026tag=1786645392"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:40c83c7127b6b90b9984b3c73b3cbad1c3a8f7af3dc792e5320d6defb9eb22e0_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.5",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:40c83c7127b6b90b9984b3c73b3cbad1c3a8f7af3dc792e5320d6defb9eb22e0_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:40c83c7127b6b90b9984b3c73b3cbad1c3a8f7af3dc792e5320d6defb9eb22e0_amd64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5b4e3a421f13bd33d03185f4071b3e633767eb06a9875a02ca793d43fd1514c7_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.5",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5b4e3a421f13bd33d03185f4071b3e633767eb06a9875a02ca793d43fd1514c7_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5b4e3a421f13bd33d03185f4071b3e633767eb06a9875a02ca793d43fd1514c7_ppc64le",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:93e605c4231903b7a73e7578f8977a5c6029c767ab801f29b726d2e6ff290feb_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.5",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:93e605c4231903b7a73e7578f8977a5c6029c767ab801f29b726d2e6ff290feb_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:93e605c4231903b7a73e7578f8977a5c6029c767ab801f29b726d2e6ff290feb_arm64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d9bc0d110bbc7b7ec8a2401f34cde12e470980086bb04fc532a9885917c06b7f_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.5",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d9bc0d110bbc7b7ec8a2401f34cde12e470980086bb04fc532a9885917c06b7f_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d9bc0d110bbc7b7ec8a2401f34cde12e470980086bb04fc532a9885917c06b7f_amd64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ee6505e36b31ecc38b080c2e56b7b26afd3c7db9b30d17947e6bcb6cf7f0e44e_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.5",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ee6505e36b31ecc38b080c2e56b7b26afd3c7db9b30d17947e6bcb6cf7f0e44e_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ee6505e36b31ecc38b080c2e56b7b26afd3c7db9b30d17947e6bcb6cf7f0e44e_s390x",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:01271821684bdb4791a1e757092e3799247ac91519f8516599c7cf9080407076_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.5",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:01271821684bdb4791a1e757092e3799247ac91519f8516599c7cf9080407076_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:01271821684bdb4791a1e757092e3799247ac91519f8516599c7cf9080407076_amd64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:958178be4fc3798cdd531660e14514c370ac334b8a27a31a8f08db3244f17341_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.5",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:958178be4fc3798cdd531660e14514c370ac334b8a27a31a8f08db3244f17341_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:958178be4fc3798cdd531660e14514c370ac334b8a27a31a8f08db3244f17341_s390x",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:b881afc31c6e287608699dfc9d38bf38ff3616b2b133cc4726f0060ce99b16de_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.5",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:b881afc31c6e287608699dfc9d38bf38ff3616b2b133cc4726f0060ce99b16de_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:b881afc31c6e287608699dfc9d38bf38ff3616b2b133cc4726f0060ce99b16de_arm64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:c237813ec28c79232f1f8d5bb2f875157323d10ddceddf3f722cd885c3c5c4d5_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.5",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:c237813ec28c79232f1f8d5bb2f875157323d10ddceddf3f722cd885c3c5c4d5_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:c237813ec28c79232f1f8d5bb2f875157323d10ddceddf3f722cd885c3c5c4d5_ppc64le",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:15b1be865c1d4df2fd1171acb46922ba864555b18dfc71febd372e11a5d0eb8e_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.5",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:15b1be865c1d4df2fd1171acb46922ba864555b18dfc71febd372e11a5d0eb8e_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:15b1be865c1d4df2fd1171acb46922ba864555b18dfc71febd372e11a5d0eb8e_amd64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:55c2e8cbb4c7e89ed719c136d401c1fa49198e4a98a2dfe78c5eacb5ee2cadc8_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.5",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:55c2e8cbb4c7e89ed719c136d401c1fa49198e4a98a2dfe78c5eacb5ee2cadc8_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:55c2e8cbb4c7e89ed719c136d401c1fa49198e4a98a2dfe78c5eacb5ee2cadc8_ppc64le",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8d334ebdf403e2a15a664c1960044c6852f3e00b55ce2f2e808f6213ae70e00f_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.5",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8d334ebdf403e2a15a664c1960044c6852f3e00b55ce2f2e808f6213ae70e00f_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8d334ebdf403e2a15a664c1960044c6852f3e00b55ce2f2e808f6213ae70e00f_s390x",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ceb52082d9002ba1762e6653bc39b4253f05a7cd58a42c664c7a658e6133a7e8_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.5",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ceb52082d9002ba1762e6653bc39b4253f05a7cd58a42c664c7a658e6133a7e8_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ceb52082d9002ba1762e6653bc39b4253f05a7cd58a42c664c7a658e6133a7e8_arm64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:17a67ac2934041f996b19574bbeffa9e56d8486969785ae219215384cfd4162f_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.5",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:17a67ac2934041f996b19574bbeffa9e56d8486969785ae219215384cfd4162f_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:17a67ac2934041f996b19574bbeffa9e56d8486969785ae219215384cfd4162f_amd64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:18ea59f76a1ddd747712fbb3314f55cfdefb4e12a39ad9f0d22c26d25e8b04b4_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.5",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:18ea59f76a1ddd747712fbb3314f55cfdefb4e12a39ad9f0d22c26d25e8b04b4_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:18ea59f76a1ddd747712fbb3314f55cfdefb4e12a39ad9f0d22c26d25e8b04b4_s390x",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1c687dff9904d440a9efefc95bd82ac1cf10df5c030ee8a3164621bc84e447fc_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.5",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1c687dff9904d440a9efefc95bd82ac1cf10df5c030ee8a3164621bc84e447fc_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1c687dff9904d440a9efefc95bd82ac1cf10df5c030ee8a3164621bc84e447fc_arm64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:fad58cb6ca31afd96f8ef741cad73c4328c24361dfad022848c227f129c5b4b5_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.5",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:fad58cb6ca31afd96f8ef741cad73c4328c24361dfad022848c227f129c5b4b5_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:fad58cb6ca31afd96f8ef741cad73c4328c24361dfad022848c227f129c5b4b5_ppc64le",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:21c630e1de77a6e18b0b774ebfc5ccef2191fef60da0c7914d0a81d5be236ea3_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.5",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:21c630e1de77a6e18b0b774ebfc5ccef2191fef60da0c7914d0a81d5be236ea3_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:21c630e1de77a6e18b0b774ebfc5ccef2191fef60da0c7914d0a81d5be236ea3_amd64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:51538cb4de3a2767509d5a7869f9a63a054416e7163c38714bce9bd83da1b619_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.5",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:51538cb4de3a2767509d5a7869f9a63a054416e7163c38714bce9bd83da1b619_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:51538cb4de3a2767509d5a7869f9a63a054416e7163c38714bce9bd83da1b619_ppc64le",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:902fe34ead11574878df61323db6ac53f3ad55d13d40f72b8d514ea0356e1a81_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.5",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:902fe34ead11574878df61323db6ac53f3ad55d13d40f72b8d514ea0356e1a81_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:902fe34ead11574878df61323db6ac53f3ad55d13d40f72b8d514ea0356e1a81_arm64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bff77adab78f874b962324a9674157383dfe4570309d24c7b2a6acebead62a39_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.5",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bff77adab78f874b962324a9674157383dfe4570309d24c7b2a6acebead62a39_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bff77adab78f874b962324a9674157383dfe4570309d24c7b2a6acebead62a39_s390x",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2a0befa5c4dbcb56ef33f46ccdb27d5e02f8f5facdbf2fa0b9c6e6dd53a476e_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.5",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2a0befa5c4dbcb56ef33f46ccdb27d5e02f8f5facdbf2fa0b9c6e6dd53a476e_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2a0befa5c4dbcb56ef33f46ccdb27d5e02f8f5facdbf2fa0b9c6e6dd53a476e_amd64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:9ffa7e5a2ed3f92a6eb30792dc878add38b41f7ce5ca03a6f1a2c8b12300070a_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.5",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:9ffa7e5a2ed3f92a6eb30792dc878add38b41f7ce5ca03a6f1a2c8b12300070a_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:9ffa7e5a2ed3f92a6eb30792dc878add38b41f7ce5ca03a6f1a2c8b12300070a_s390x",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a6a946b8e424db855be70e94c1cab3e5dcf56be8b5caec8d48b3b4579310a25a_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.5",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a6a946b8e424db855be70e94c1cab3e5dcf56be8b5caec8d48b3b4579310a25a_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a6a946b8e424db855be70e94c1cab3e5dcf56be8b5caec8d48b3b4579310a25a_ppc64le",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:de70e3309c799110feacba1b6d64bf153818e21790500da6ea75c05f276bedcd_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.5",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:de70e3309c799110feacba1b6d64bf153818e21790500da6ea75c05f276bedcd_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:de70e3309c799110feacba1b6d64bf153818e21790500da6ea75c05f276bedcd_arm64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f49b88b70726cb222fa43685d3a6704ccd8778a2a82b7c5c4aee4b47c54d3bcb_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.5",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f49b88b70726cb222fa43685d3a6704ccd8778a2a82b7c5c4aee4b47c54d3bcb_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f49b88b70726cb222fa43685d3a6704ccd8778a2a82b7c5c4aee4b47c54d3bcb_amd64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:11caeb0f6c63f361d12e2c223aa0e1e363c79d8495a008f5b996184dfdd15d57_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.5",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:11caeb0f6c63f361d12e2c223aa0e1e363c79d8495a008f5b996184dfdd15d57_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:11caeb0f6c63f361d12e2c223aa0e1e363c79d8495a008f5b996184dfdd15d57_ppc64le",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:66b2f52b2abd9e3a1fcd1ef4aa926a0f8613730918a2b7743ce61d1ce9b103c7_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.5",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:66b2f52b2abd9e3a1fcd1ef4aa926a0f8613730918a2b7743ce61d1ce9b103c7_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:66b2f52b2abd9e3a1fcd1ef4aa926a0f8613730918a2b7743ce61d1ce9b103c7_arm64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:deefcb8674d1899581331ba7899baedb7f9c5355b2b3e4f11b5414b1ae58a8be_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.5",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:deefcb8674d1899581331ba7899baedb7f9c5355b2b3e4f11b5414b1ae58a8be_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:deefcb8674d1899581331ba7899baedb7f9c5355b2b3e4f11b5414b1ae58a8be_amd64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:f980269a8879cd0dced67eec6e2ec9f708b347e4d49981fafccc6c795f73e4cf_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.5",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:f980269a8879cd0dced67eec6e2ec9f708b347e4d49981fafccc6c795f73e4cf_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:f980269a8879cd0dced67eec6e2ec9f708b347e4d49981fafccc6c795f73e4cf_s390x",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:01853cca36a1042f42860bb89048c4a09de76b2cfac412fd78e38fd74376ca39_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.5",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01853cca36a1042f42860bb89048c4a09de76b2cfac412fd78e38fd74376ca39_amd64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:01853cca36a1042f42860bb89048c4a09de76b2cfac412fd78e38fd74376ca39_amd64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:4970ca74fcbc6aaf9f64812f37e31426444d041345541d498b12a819cbe29299_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.5",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:4970ca74fcbc6aaf9f64812f37e31426444d041345541d498b12a819cbe29299_s390x"
        },
        "product_reference": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:4970ca74fcbc6aaf9f64812f37e31426444d041345541d498b12a819cbe29299_s390x",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:527395e13fedf00d5ffa4a2c70602cab213ff9c826940a529150d6b1df4f7395_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.5",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:527395e13fedf00d5ffa4a2c70602cab213ff9c826940a529150d6b1df4f7395_arm64"
        },
        "product_reference": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:527395e13fedf00d5ffa4a2c70602cab213ff9c826940a529150d6b1df4f7395_arm64",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:b3ca415e883c09cf8f42f2b1b63ddf007fae7ac183f2185201efecf48489636e_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.5",
          "product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b3ca415e883c09cf8f42f2b1b63ddf007fae7ac183f2185201efecf48489636e_ppc64le"
        },
        "product_reference": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:b3ca415e883c09cf8f42f2b1b63ddf007fae7ac183f2185201efecf48489636e_ppc64le",
        "relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-25681",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2026-05-22T16:01:08.177603+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:40c83c7127b6b90b9984b3c73b3cbad1c3a8f7af3dc792e5320d6defb9eb22e0_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:01271821684bdb4791a1e757092e3799247ac91519f8516599c7cf9080407076_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:958178be4fc3798cdd531660e14514c370ac334b8a27a31a8f08db3244f17341_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:b881afc31c6e287608699dfc9d38bf38ff3616b2b133cc4726f0060ce99b16de_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:c237813ec28c79232f1f8d5bb2f875157323d10ddceddf3f722cd885c3c5c4d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:15b1be865c1d4df2fd1171acb46922ba864555b18dfc71febd372e11a5d0eb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:55c2e8cbb4c7e89ed719c136d401c1fa49198e4a98a2dfe78c5eacb5ee2cadc8_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8d334ebdf403e2a15a664c1960044c6852f3e00b55ce2f2e808f6213ae70e00f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ceb52082d9002ba1762e6653bc39b4253f05a7cd58a42c664c7a658e6133a7e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:17a67ac2934041f996b19574bbeffa9e56d8486969785ae219215384cfd4162f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:18ea59f76a1ddd747712fbb3314f55cfdefb4e12a39ad9f0d22c26d25e8b04b4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1c687dff9904d440a9efefc95bd82ac1cf10df5c030ee8a3164621bc84e447fc_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:fad58cb6ca31afd96f8ef741cad73c4328c24361dfad022848c227f129c5b4b5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:21c630e1de77a6e18b0b774ebfc5ccef2191fef60da0c7914d0a81d5be236ea3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:51538cb4de3a2767509d5a7869f9a63a054416e7163c38714bce9bd83da1b619_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:902fe34ead11574878df61323db6ac53f3ad55d13d40f72b8d514ea0356e1a81_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bff77adab78f874b962324a9674157383dfe4570309d24c7b2a6acebead62a39_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2a0befa5c4dbcb56ef33f46ccdb27d5e02f8f5facdbf2fa0b9c6e6dd53a476e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:9ffa7e5a2ed3f92a6eb30792dc878add38b41f7ce5ca03a6f1a2c8b12300070a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a6a946b8e424db855be70e94c1cab3e5dcf56be8b5caec8d48b3b4579310a25a_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:de70e3309c799110feacba1b6d64bf153818e21790500da6ea75c05f276bedcd_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f49b88b70726cb222fa43685d3a6704ccd8778a2a82b7c5c4aee4b47c54d3bcb_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:11caeb0f6c63f361d12e2c223aa0e1e363c79d8495a008f5b996184dfdd15d57_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:66b2f52b2abd9e3a1fcd1ef4aa926a0f8613730918a2b7743ce61d1ce9b103c7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:deefcb8674d1899581331ba7899baedb7f9c5355b2b3e4f11b5414b1ae58a8be_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:f980269a8879cd0dced67eec6e2ec9f708b347e4d49981fafccc6c795f73e4cf_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01853cca36a1042f42860bb89048c4a09de76b2cfac412fd78e38fd74376ca39_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:4970ca74fcbc6aaf9f64812f37e31426444d041345541d498b12a819cbe29299_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:527395e13fedf00d5ffa4a2c70602cab213ff9c826940a529150d6b1df4f7395_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b3ca415e883c09cf8f42f2b1b63ddf007fae7ac183f2185201efecf48489636e_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480761"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important vulnerability in `golang.org/x/net/html` could enable remote attackers to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution. The flaw allows specially crafted HTML to bypass input sanitization during parsing and rendering. Red Hat products are affected if they process untrusted HTML content using the vulnerable component without additional output encoding or robust content security policies.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5b4e3a421f13bd33d03185f4071b3e633767eb06a9875a02ca793d43fd1514c7_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:93e605c4231903b7a73e7578f8977a5c6029c767ab801f29b726d2e6ff290feb_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d9bc0d110bbc7b7ec8a2401f34cde12e470980086bb04fc532a9885917c06b7f_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ee6505e36b31ecc38b080c2e56b7b26afd3c7db9b30d17947e6bcb6cf7f0e44e_s390x"
        ],
        "known_not_affected": [
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:40c83c7127b6b90b9984b3c73b3cbad1c3a8f7af3dc792e5320d6defb9eb22e0_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:01271821684bdb4791a1e757092e3799247ac91519f8516599c7cf9080407076_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:958178be4fc3798cdd531660e14514c370ac334b8a27a31a8f08db3244f17341_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:b881afc31c6e287608699dfc9d38bf38ff3616b2b133cc4726f0060ce99b16de_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:c237813ec28c79232f1f8d5bb2f875157323d10ddceddf3f722cd885c3c5c4d5_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:15b1be865c1d4df2fd1171acb46922ba864555b18dfc71febd372e11a5d0eb8e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:55c2e8cbb4c7e89ed719c136d401c1fa49198e4a98a2dfe78c5eacb5ee2cadc8_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8d334ebdf403e2a15a664c1960044c6852f3e00b55ce2f2e808f6213ae70e00f_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ceb52082d9002ba1762e6653bc39b4253f05a7cd58a42c664c7a658e6133a7e8_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:17a67ac2934041f996b19574bbeffa9e56d8486969785ae219215384cfd4162f_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:18ea59f76a1ddd747712fbb3314f55cfdefb4e12a39ad9f0d22c26d25e8b04b4_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1c687dff9904d440a9efefc95bd82ac1cf10df5c030ee8a3164621bc84e447fc_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:fad58cb6ca31afd96f8ef741cad73c4328c24361dfad022848c227f129c5b4b5_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:21c630e1de77a6e18b0b774ebfc5ccef2191fef60da0c7914d0a81d5be236ea3_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:51538cb4de3a2767509d5a7869f9a63a054416e7163c38714bce9bd83da1b619_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:902fe34ead11574878df61323db6ac53f3ad55d13d40f72b8d514ea0356e1a81_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bff77adab78f874b962324a9674157383dfe4570309d24c7b2a6acebead62a39_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2a0befa5c4dbcb56ef33f46ccdb27d5e02f8f5facdbf2fa0b9c6e6dd53a476e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:9ffa7e5a2ed3f92a6eb30792dc878add38b41f7ce5ca03a6f1a2c8b12300070a_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a6a946b8e424db855be70e94c1cab3e5dcf56be8b5caec8d48b3b4579310a25a_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:de70e3309c799110feacba1b6d64bf153818e21790500da6ea75c05f276bedcd_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f49b88b70726cb222fa43685d3a6704ccd8778a2a82b7c5c4aee4b47c54d3bcb_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:11caeb0f6c63f361d12e2c223aa0e1e363c79d8495a008f5b996184dfdd15d57_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:66b2f52b2abd9e3a1fcd1ef4aa926a0f8613730918a2b7743ce61d1ce9b103c7_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:deefcb8674d1899581331ba7899baedb7f9c5355b2b3e4f11b5414b1ae58a8be_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:f980269a8879cd0dced67eec6e2ec9f708b347e4d49981fafccc6c795f73e4cf_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01853cca36a1042f42860bb89048c4a09de76b2cfac412fd78e38fd74376ca39_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:4970ca74fcbc6aaf9f64812f37e31426444d041345541d498b12a819cbe29299_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:527395e13fedf00d5ffa4a2c70602cab213ff9c826940a529150d6b1df4f7395_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b3ca415e883c09cf8f42f2b1b63ddf007fae7ac183f2185201efecf48489636e_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-25681"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480761",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-25681",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781703",
          "url": "https://go.dev/cl/781703"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79574",
          "url": "https://go.dev/issue/79574"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
          "url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5029",
          "url": "https://pkg.go.dev/vuln/GO-2026-5029"
        }
      ],
      "release_date": "2026-05-22T15:01:21.975000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-18T16:40:44+00:00",
          "details": "For OpenShift Container Platform 4.21 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/ocp-4-21-release-notes\n\nFor Red Hat OpenShift Logging 6.5, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.5",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5b4e3a421f13bd33d03185f4071b3e633767eb06a9875a02ca793d43fd1514c7_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:93e605c4231903b7a73e7578f8977a5c6029c767ab801f29b726d2e6ff290feb_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d9bc0d110bbc7b7ec8a2401f34cde12e470980086bb04fc532a9885917c06b7f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ee6505e36b31ecc38b080c2e56b7b26afd3c7db9b30d17947e6bcb6cf7f0e44e_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:56340"
        },
        {
          "category": "workaround",
          "details": "To mitigate this flaw, applications processing untrusted HTML input must implement strict input sanitization and ensure all output is properly encoded before rendering. Deploying a comprehensive Content Security Policy (CSP) can restrict script execution, further reducing the attack surface. Administrators should review application configurations to ensure adequate protection against XSS.",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:40c83c7127b6b90b9984b3c73b3cbad1c3a8f7af3dc792e5320d6defb9eb22e0_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5b4e3a421f13bd33d03185f4071b3e633767eb06a9875a02ca793d43fd1514c7_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:93e605c4231903b7a73e7578f8977a5c6029c767ab801f29b726d2e6ff290feb_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d9bc0d110bbc7b7ec8a2401f34cde12e470980086bb04fc532a9885917c06b7f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ee6505e36b31ecc38b080c2e56b7b26afd3c7db9b30d17947e6bcb6cf7f0e44e_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:01271821684bdb4791a1e757092e3799247ac91519f8516599c7cf9080407076_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:958178be4fc3798cdd531660e14514c370ac334b8a27a31a8f08db3244f17341_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:b881afc31c6e287608699dfc9d38bf38ff3616b2b133cc4726f0060ce99b16de_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:c237813ec28c79232f1f8d5bb2f875157323d10ddceddf3f722cd885c3c5c4d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:15b1be865c1d4df2fd1171acb46922ba864555b18dfc71febd372e11a5d0eb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:55c2e8cbb4c7e89ed719c136d401c1fa49198e4a98a2dfe78c5eacb5ee2cadc8_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8d334ebdf403e2a15a664c1960044c6852f3e00b55ce2f2e808f6213ae70e00f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ceb52082d9002ba1762e6653bc39b4253f05a7cd58a42c664c7a658e6133a7e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:17a67ac2934041f996b19574bbeffa9e56d8486969785ae219215384cfd4162f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:18ea59f76a1ddd747712fbb3314f55cfdefb4e12a39ad9f0d22c26d25e8b04b4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1c687dff9904d440a9efefc95bd82ac1cf10df5c030ee8a3164621bc84e447fc_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:fad58cb6ca31afd96f8ef741cad73c4328c24361dfad022848c227f129c5b4b5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:21c630e1de77a6e18b0b774ebfc5ccef2191fef60da0c7914d0a81d5be236ea3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:51538cb4de3a2767509d5a7869f9a63a054416e7163c38714bce9bd83da1b619_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:902fe34ead11574878df61323db6ac53f3ad55d13d40f72b8d514ea0356e1a81_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bff77adab78f874b962324a9674157383dfe4570309d24c7b2a6acebead62a39_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2a0befa5c4dbcb56ef33f46ccdb27d5e02f8f5facdbf2fa0b9c6e6dd53a476e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:9ffa7e5a2ed3f92a6eb30792dc878add38b41f7ce5ca03a6f1a2c8b12300070a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a6a946b8e424db855be70e94c1cab3e5dcf56be8b5caec8d48b3b4579310a25a_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:de70e3309c799110feacba1b6d64bf153818e21790500da6ea75c05f276bedcd_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f49b88b70726cb222fa43685d3a6704ccd8778a2a82b7c5c4aee4b47c54d3bcb_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:11caeb0f6c63f361d12e2c223aa0e1e363c79d8495a008f5b996184dfdd15d57_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:66b2f52b2abd9e3a1fcd1ef4aa926a0f8613730918a2b7743ce61d1ce9b103c7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:deefcb8674d1899581331ba7899baedb7f9c5355b2b3e4f11b5414b1ae58a8be_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:f980269a8879cd0dced67eec6e2ec9f708b347e4d49981fafccc6c795f73e4cf_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01853cca36a1042f42860bb89048c4a09de76b2cfac412fd78e38fd74376ca39_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:4970ca74fcbc6aaf9f64812f37e31426444d041345541d498b12a819cbe29299_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:527395e13fedf00d5ffa4a2c70602cab213ff9c826940a529150d6b1df4f7395_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b3ca415e883c09cf8f42f2b1b63ddf007fae7ac183f2185201efecf48489636e_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:40c83c7127b6b90b9984b3c73b3cbad1c3a8f7af3dc792e5320d6defb9eb22e0_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5b4e3a421f13bd33d03185f4071b3e633767eb06a9875a02ca793d43fd1514c7_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:93e605c4231903b7a73e7578f8977a5c6029c767ab801f29b726d2e6ff290feb_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d9bc0d110bbc7b7ec8a2401f34cde12e470980086bb04fc532a9885917c06b7f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ee6505e36b31ecc38b080c2e56b7b26afd3c7db9b30d17947e6bcb6cf7f0e44e_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:01271821684bdb4791a1e757092e3799247ac91519f8516599c7cf9080407076_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:958178be4fc3798cdd531660e14514c370ac334b8a27a31a8f08db3244f17341_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:b881afc31c6e287608699dfc9d38bf38ff3616b2b133cc4726f0060ce99b16de_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:c237813ec28c79232f1f8d5bb2f875157323d10ddceddf3f722cd885c3c5c4d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:15b1be865c1d4df2fd1171acb46922ba864555b18dfc71febd372e11a5d0eb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:55c2e8cbb4c7e89ed719c136d401c1fa49198e4a98a2dfe78c5eacb5ee2cadc8_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8d334ebdf403e2a15a664c1960044c6852f3e00b55ce2f2e808f6213ae70e00f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ceb52082d9002ba1762e6653bc39b4253f05a7cd58a42c664c7a658e6133a7e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:17a67ac2934041f996b19574bbeffa9e56d8486969785ae219215384cfd4162f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:18ea59f76a1ddd747712fbb3314f55cfdefb4e12a39ad9f0d22c26d25e8b04b4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1c687dff9904d440a9efefc95bd82ac1cf10df5c030ee8a3164621bc84e447fc_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:fad58cb6ca31afd96f8ef741cad73c4328c24361dfad022848c227f129c5b4b5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:21c630e1de77a6e18b0b774ebfc5ccef2191fef60da0c7914d0a81d5be236ea3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:51538cb4de3a2767509d5a7869f9a63a054416e7163c38714bce9bd83da1b619_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:902fe34ead11574878df61323db6ac53f3ad55d13d40f72b8d514ea0356e1a81_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bff77adab78f874b962324a9674157383dfe4570309d24c7b2a6acebead62a39_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2a0befa5c4dbcb56ef33f46ccdb27d5e02f8f5facdbf2fa0b9c6e6dd53a476e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:9ffa7e5a2ed3f92a6eb30792dc878add38b41f7ce5ca03a6f1a2c8b12300070a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a6a946b8e424db855be70e94c1cab3e5dcf56be8b5caec8d48b3b4579310a25a_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:de70e3309c799110feacba1b6d64bf153818e21790500da6ea75c05f276bedcd_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f49b88b70726cb222fa43685d3a6704ccd8778a2a82b7c5c4aee4b47c54d3bcb_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:11caeb0f6c63f361d12e2c223aa0e1e363c79d8495a008f5b996184dfdd15d57_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:66b2f52b2abd9e3a1fcd1ef4aa926a0f8613730918a2b7743ce61d1ce9b103c7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:deefcb8674d1899581331ba7899baedb7f9c5355b2b3e4f11b5414b1ae58a8be_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:f980269a8879cd0dced67eec6e2ec9f708b347e4d49981fafccc6c795f73e4cf_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01853cca36a1042f42860bb89048c4a09de76b2cfac412fd78e38fd74376ca39_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:4970ca74fcbc6aaf9f64812f37e31426444d041345541d498b12a819cbe29299_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:527395e13fedf00d5ffa4a2c70602cab213ff9c826940a529150d6b1df4f7395_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b3ca415e883c09cf8f42f2b1b63ddf007fae7ac183f2185201efecf48489636e_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting"
    },
    {
      "cve": "CVE-2026-27136",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2026-05-22T16:00:56.609820+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:40c83c7127b6b90b9984b3c73b3cbad1c3a8f7af3dc792e5320d6defb9eb22e0_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:01271821684bdb4791a1e757092e3799247ac91519f8516599c7cf9080407076_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:958178be4fc3798cdd531660e14514c370ac334b8a27a31a8f08db3244f17341_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:b881afc31c6e287608699dfc9d38bf38ff3616b2b133cc4726f0060ce99b16de_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:c237813ec28c79232f1f8d5bb2f875157323d10ddceddf3f722cd885c3c5c4d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:15b1be865c1d4df2fd1171acb46922ba864555b18dfc71febd372e11a5d0eb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:55c2e8cbb4c7e89ed719c136d401c1fa49198e4a98a2dfe78c5eacb5ee2cadc8_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8d334ebdf403e2a15a664c1960044c6852f3e00b55ce2f2e808f6213ae70e00f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ceb52082d9002ba1762e6653bc39b4253f05a7cd58a42c664c7a658e6133a7e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:17a67ac2934041f996b19574bbeffa9e56d8486969785ae219215384cfd4162f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:18ea59f76a1ddd747712fbb3314f55cfdefb4e12a39ad9f0d22c26d25e8b04b4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1c687dff9904d440a9efefc95bd82ac1cf10df5c030ee8a3164621bc84e447fc_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:fad58cb6ca31afd96f8ef741cad73c4328c24361dfad022848c227f129c5b4b5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:21c630e1de77a6e18b0b774ebfc5ccef2191fef60da0c7914d0a81d5be236ea3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:51538cb4de3a2767509d5a7869f9a63a054416e7163c38714bce9bd83da1b619_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:902fe34ead11574878df61323db6ac53f3ad55d13d40f72b8d514ea0356e1a81_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bff77adab78f874b962324a9674157383dfe4570309d24c7b2a6acebead62a39_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2a0befa5c4dbcb56ef33f46ccdb27d5e02f8f5facdbf2fa0b9c6e6dd53a476e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:9ffa7e5a2ed3f92a6eb30792dc878add38b41f7ce5ca03a6f1a2c8b12300070a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a6a946b8e424db855be70e94c1cab3e5dcf56be8b5caec8d48b3b4579310a25a_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:de70e3309c799110feacba1b6d64bf153818e21790500da6ea75c05f276bedcd_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f49b88b70726cb222fa43685d3a6704ccd8778a2a82b7c5c4aee4b47c54d3bcb_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:11caeb0f6c63f361d12e2c223aa0e1e363c79d8495a008f5b996184dfdd15d57_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:66b2f52b2abd9e3a1fcd1ef4aa926a0f8613730918a2b7743ce61d1ce9b103c7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:deefcb8674d1899581331ba7899baedb7f9c5355b2b3e4f11b5414b1ae58a8be_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:f980269a8879cd0dced67eec6e2ec9f708b347e4d49981fafccc6c795f73e4cf_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01853cca36a1042f42860bb89048c4a09de76b2cfac412fd78e38fd74376ca39_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:4970ca74fcbc6aaf9f64812f37e31426444d041345541d498b12a819cbe29299_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:527395e13fedf00d5ffa4a2c70602cab213ff9c826940a529150d6b1df4f7395_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b3ca415e883c09cf8f42f2b1b63ddf007fae7ac183f2185201efecf48489636e_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480757"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability in `golang.org/x/net/html` is rated as Important. It allows for Cross-Site Scripting (XSS) attacks by enabling an attacker to bypass HTML sanitization mechanisms when arbitrary HTML is parsed and rendered. This can lead to information disclosure or arbitrary code execution in affected applications. Exploitation typically requires user interaction, where a user processes specially crafted malicious HTML content.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5b4e3a421f13bd33d03185f4071b3e633767eb06a9875a02ca793d43fd1514c7_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:93e605c4231903b7a73e7578f8977a5c6029c767ab801f29b726d2e6ff290feb_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d9bc0d110bbc7b7ec8a2401f34cde12e470980086bb04fc532a9885917c06b7f_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ee6505e36b31ecc38b080c2e56b7b26afd3c7db9b30d17947e6bcb6cf7f0e44e_s390x"
        ],
        "known_not_affected": [
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:40c83c7127b6b90b9984b3c73b3cbad1c3a8f7af3dc792e5320d6defb9eb22e0_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:01271821684bdb4791a1e757092e3799247ac91519f8516599c7cf9080407076_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:958178be4fc3798cdd531660e14514c370ac334b8a27a31a8f08db3244f17341_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:b881afc31c6e287608699dfc9d38bf38ff3616b2b133cc4726f0060ce99b16de_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:c237813ec28c79232f1f8d5bb2f875157323d10ddceddf3f722cd885c3c5c4d5_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:15b1be865c1d4df2fd1171acb46922ba864555b18dfc71febd372e11a5d0eb8e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:55c2e8cbb4c7e89ed719c136d401c1fa49198e4a98a2dfe78c5eacb5ee2cadc8_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8d334ebdf403e2a15a664c1960044c6852f3e00b55ce2f2e808f6213ae70e00f_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ceb52082d9002ba1762e6653bc39b4253f05a7cd58a42c664c7a658e6133a7e8_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:17a67ac2934041f996b19574bbeffa9e56d8486969785ae219215384cfd4162f_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:18ea59f76a1ddd747712fbb3314f55cfdefb4e12a39ad9f0d22c26d25e8b04b4_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1c687dff9904d440a9efefc95bd82ac1cf10df5c030ee8a3164621bc84e447fc_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:fad58cb6ca31afd96f8ef741cad73c4328c24361dfad022848c227f129c5b4b5_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:21c630e1de77a6e18b0b774ebfc5ccef2191fef60da0c7914d0a81d5be236ea3_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:51538cb4de3a2767509d5a7869f9a63a054416e7163c38714bce9bd83da1b619_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:902fe34ead11574878df61323db6ac53f3ad55d13d40f72b8d514ea0356e1a81_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bff77adab78f874b962324a9674157383dfe4570309d24c7b2a6acebead62a39_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2a0befa5c4dbcb56ef33f46ccdb27d5e02f8f5facdbf2fa0b9c6e6dd53a476e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:9ffa7e5a2ed3f92a6eb30792dc878add38b41f7ce5ca03a6f1a2c8b12300070a_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a6a946b8e424db855be70e94c1cab3e5dcf56be8b5caec8d48b3b4579310a25a_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:de70e3309c799110feacba1b6d64bf153818e21790500da6ea75c05f276bedcd_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f49b88b70726cb222fa43685d3a6704ccd8778a2a82b7c5c4aee4b47c54d3bcb_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:11caeb0f6c63f361d12e2c223aa0e1e363c79d8495a008f5b996184dfdd15d57_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:66b2f52b2abd9e3a1fcd1ef4aa926a0f8613730918a2b7743ce61d1ce9b103c7_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:deefcb8674d1899581331ba7899baedb7f9c5355b2b3e4f11b5414b1ae58a8be_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:f980269a8879cd0dced67eec6e2ec9f708b347e4d49981fafccc6c795f73e4cf_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01853cca36a1042f42860bb89048c4a09de76b2cfac412fd78e38fd74376ca39_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:4970ca74fcbc6aaf9f64812f37e31426444d041345541d498b12a819cbe29299_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:527395e13fedf00d5ffa4a2c70602cab213ff9c826940a529150d6b1df4f7395_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b3ca415e883c09cf8f42f2b1b63ddf007fae7ac183f2185201efecf48489636e_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-27136"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480757",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-27136",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781685",
          "url": "https://go.dev/cl/781685"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79575",
          "url": "https://go.dev/issue/79575"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
          "url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5030",
          "url": "https://pkg.go.dev/vuln/GO-2026-5030"
        }
      ],
      "release_date": "2026-05-22T15:01:22.111000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-18T16:40:44+00:00",
          "details": "For OpenShift Container Platform 4.21 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/ocp-4-21-release-notes\n\nFor Red Hat OpenShift Logging 6.5, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.5",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5b4e3a421f13bd33d03185f4071b3e633767eb06a9875a02ca793d43fd1514c7_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:93e605c4231903b7a73e7578f8977a5c6029c767ab801f29b726d2e6ff290feb_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d9bc0d110bbc7b7ec8a2401f34cde12e470980086bb04fc532a9885917c06b7f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ee6505e36b31ecc38b080c2e56b7b26afd3c7db9b30d17947e6bcb6cf7f0e44e_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:56340"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:40c83c7127b6b90b9984b3c73b3cbad1c3a8f7af3dc792e5320d6defb9eb22e0_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5b4e3a421f13bd33d03185f4071b3e633767eb06a9875a02ca793d43fd1514c7_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:93e605c4231903b7a73e7578f8977a5c6029c767ab801f29b726d2e6ff290feb_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d9bc0d110bbc7b7ec8a2401f34cde12e470980086bb04fc532a9885917c06b7f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ee6505e36b31ecc38b080c2e56b7b26afd3c7db9b30d17947e6bcb6cf7f0e44e_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:01271821684bdb4791a1e757092e3799247ac91519f8516599c7cf9080407076_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:958178be4fc3798cdd531660e14514c370ac334b8a27a31a8f08db3244f17341_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:b881afc31c6e287608699dfc9d38bf38ff3616b2b133cc4726f0060ce99b16de_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:c237813ec28c79232f1f8d5bb2f875157323d10ddceddf3f722cd885c3c5c4d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:15b1be865c1d4df2fd1171acb46922ba864555b18dfc71febd372e11a5d0eb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:55c2e8cbb4c7e89ed719c136d401c1fa49198e4a98a2dfe78c5eacb5ee2cadc8_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8d334ebdf403e2a15a664c1960044c6852f3e00b55ce2f2e808f6213ae70e00f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ceb52082d9002ba1762e6653bc39b4253f05a7cd58a42c664c7a658e6133a7e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:17a67ac2934041f996b19574bbeffa9e56d8486969785ae219215384cfd4162f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:18ea59f76a1ddd747712fbb3314f55cfdefb4e12a39ad9f0d22c26d25e8b04b4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1c687dff9904d440a9efefc95bd82ac1cf10df5c030ee8a3164621bc84e447fc_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:fad58cb6ca31afd96f8ef741cad73c4328c24361dfad022848c227f129c5b4b5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:21c630e1de77a6e18b0b774ebfc5ccef2191fef60da0c7914d0a81d5be236ea3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:51538cb4de3a2767509d5a7869f9a63a054416e7163c38714bce9bd83da1b619_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:902fe34ead11574878df61323db6ac53f3ad55d13d40f72b8d514ea0356e1a81_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bff77adab78f874b962324a9674157383dfe4570309d24c7b2a6acebead62a39_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2a0befa5c4dbcb56ef33f46ccdb27d5e02f8f5facdbf2fa0b9c6e6dd53a476e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:9ffa7e5a2ed3f92a6eb30792dc878add38b41f7ce5ca03a6f1a2c8b12300070a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a6a946b8e424db855be70e94c1cab3e5dcf56be8b5caec8d48b3b4579310a25a_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:de70e3309c799110feacba1b6d64bf153818e21790500da6ea75c05f276bedcd_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f49b88b70726cb222fa43685d3a6704ccd8778a2a82b7c5c4aee4b47c54d3bcb_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:11caeb0f6c63f361d12e2c223aa0e1e363c79d8495a008f5b996184dfdd15d57_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:66b2f52b2abd9e3a1fcd1ef4aa926a0f8613730918a2b7743ce61d1ce9b103c7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:deefcb8674d1899581331ba7899baedb7f9c5355b2b3e4f11b5414b1ae58a8be_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:f980269a8879cd0dced67eec6e2ec9f708b347e4d49981fafccc6c795f73e4cf_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01853cca36a1042f42860bb89048c4a09de76b2cfac412fd78e38fd74376ca39_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:4970ca74fcbc6aaf9f64812f37e31426444d041345541d498b12a819cbe29299_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:527395e13fedf00d5ffa4a2c70602cab213ff9c826940a529150d6b1df4f7395_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b3ca415e883c09cf8f42f2b1b63ddf007fae7ac183f2185201efecf48489636e_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:40c83c7127b6b90b9984b3c73b3cbad1c3a8f7af3dc792e5320d6defb9eb22e0_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5b4e3a421f13bd33d03185f4071b3e633767eb06a9875a02ca793d43fd1514c7_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:93e605c4231903b7a73e7578f8977a5c6029c767ab801f29b726d2e6ff290feb_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d9bc0d110bbc7b7ec8a2401f34cde12e470980086bb04fc532a9885917c06b7f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ee6505e36b31ecc38b080c2e56b7b26afd3c7db9b30d17947e6bcb6cf7f0e44e_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:01271821684bdb4791a1e757092e3799247ac91519f8516599c7cf9080407076_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:958178be4fc3798cdd531660e14514c370ac334b8a27a31a8f08db3244f17341_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:b881afc31c6e287608699dfc9d38bf38ff3616b2b133cc4726f0060ce99b16de_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:c237813ec28c79232f1f8d5bb2f875157323d10ddceddf3f722cd885c3c5c4d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:15b1be865c1d4df2fd1171acb46922ba864555b18dfc71febd372e11a5d0eb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:55c2e8cbb4c7e89ed719c136d401c1fa49198e4a98a2dfe78c5eacb5ee2cadc8_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8d334ebdf403e2a15a664c1960044c6852f3e00b55ce2f2e808f6213ae70e00f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ceb52082d9002ba1762e6653bc39b4253f05a7cd58a42c664c7a658e6133a7e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:17a67ac2934041f996b19574bbeffa9e56d8486969785ae219215384cfd4162f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:18ea59f76a1ddd747712fbb3314f55cfdefb4e12a39ad9f0d22c26d25e8b04b4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1c687dff9904d440a9efefc95bd82ac1cf10df5c030ee8a3164621bc84e447fc_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:fad58cb6ca31afd96f8ef741cad73c4328c24361dfad022848c227f129c5b4b5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:21c630e1de77a6e18b0b774ebfc5ccef2191fef60da0c7914d0a81d5be236ea3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:51538cb4de3a2767509d5a7869f9a63a054416e7163c38714bce9bd83da1b619_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:902fe34ead11574878df61323db6ac53f3ad55d13d40f72b8d514ea0356e1a81_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bff77adab78f874b962324a9674157383dfe4570309d24c7b2a6acebead62a39_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2a0befa5c4dbcb56ef33f46ccdb27d5e02f8f5facdbf2fa0b9c6e6dd53a476e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:9ffa7e5a2ed3f92a6eb30792dc878add38b41f7ce5ca03a6f1a2c8b12300070a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a6a946b8e424db855be70e94c1cab3e5dcf56be8b5caec8d48b3b4579310a25a_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:de70e3309c799110feacba1b6d64bf153818e21790500da6ea75c05f276bedcd_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f49b88b70726cb222fa43685d3a6704ccd8778a2a82b7c5c4aee4b47c54d3bcb_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:11caeb0f6c63f361d12e2c223aa0e1e363c79d8495a008f5b996184dfdd15d57_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:66b2f52b2abd9e3a1fcd1ef4aa926a0f8613730918a2b7743ce61d1ce9b103c7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:deefcb8674d1899581331ba7899baedb7f9c5355b2b3e4f11b5414b1ae58a8be_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:f980269a8879cd0dced67eec6e2ec9f708b347e4d49981fafccc6c795f73e4cf_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01853cca36a1042f42860bb89048c4a09de76b2cfac412fd78e38fd74376ca39_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:4970ca74fcbc6aaf9f64812f37e31426444d041345541d498b12a819cbe29299_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:527395e13fedf00d5ffa4a2c70602cab213ff9c826940a529150d6b1df4f7395_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b3ca415e883c09cf8f42f2b1b63ddf007fae7ac183f2185201efecf48489636e_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass"
    },
    {
      "cve": "CVE-2026-32281",
      "cwe": {
        "id": "CWE-1050",
        "name": "Excessive Platform Resource Consumption within a Loop"
      },
      "discovery_date": "2026-04-08T02:01:00.930989+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:40c83c7127b6b90b9984b3c73b3cbad1c3a8f7af3dc792e5320d6defb9eb22e0_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5b4e3a421f13bd33d03185f4071b3e633767eb06a9875a02ca793d43fd1514c7_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:93e605c4231903b7a73e7578f8977a5c6029c767ab801f29b726d2e6ff290feb_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d9bc0d110bbc7b7ec8a2401f34cde12e470980086bb04fc532a9885917c06b7f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ee6505e36b31ecc38b080c2e56b7b26afd3c7db9b30d17947e6bcb6cf7f0e44e_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:01271821684bdb4791a1e757092e3799247ac91519f8516599c7cf9080407076_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:958178be4fc3798cdd531660e14514c370ac334b8a27a31a8f08db3244f17341_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:b881afc31c6e287608699dfc9d38bf38ff3616b2b133cc4726f0060ce99b16de_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:c237813ec28c79232f1f8d5bb2f875157323d10ddceddf3f722cd885c3c5c4d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:15b1be865c1d4df2fd1171acb46922ba864555b18dfc71febd372e11a5d0eb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:55c2e8cbb4c7e89ed719c136d401c1fa49198e4a98a2dfe78c5eacb5ee2cadc8_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8d334ebdf403e2a15a664c1960044c6852f3e00b55ce2f2e808f6213ae70e00f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ceb52082d9002ba1762e6653bc39b4253f05a7cd58a42c664c7a658e6133a7e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:21c630e1de77a6e18b0b774ebfc5ccef2191fef60da0c7914d0a81d5be236ea3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:51538cb4de3a2767509d5a7869f9a63a054416e7163c38714bce9bd83da1b619_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:902fe34ead11574878df61323db6ac53f3ad55d13d40f72b8d514ea0356e1a81_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bff77adab78f874b962324a9674157383dfe4570309d24c7b2a6acebead62a39_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2a0befa5c4dbcb56ef33f46ccdb27d5e02f8f5facdbf2fa0b9c6e6dd53a476e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:9ffa7e5a2ed3f92a6eb30792dc878add38b41f7ce5ca03a6f1a2c8b12300070a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a6a946b8e424db855be70e94c1cab3e5dcf56be8b5caec8d48b3b4579310a25a_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:de70e3309c799110feacba1b6d64bf153818e21790500da6ea75c05f276bedcd_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f49b88b70726cb222fa43685d3a6704ccd8778a2a82b7c5c4aee4b47c54d3bcb_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:11caeb0f6c63f361d12e2c223aa0e1e363c79d8495a008f5b996184dfdd15d57_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:66b2f52b2abd9e3a1fcd1ef4aa926a0f8613730918a2b7743ce61d1ce9b103c7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:deefcb8674d1899581331ba7899baedb7f9c5355b2b3e4f11b5414b1ae58a8be_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:f980269a8879cd0dced67eec6e2ec9f708b347e4d49981fafccc6c795f73e4cf_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01853cca36a1042f42860bb89048c4a09de76b2cfac412fd78e38fd74376ca39_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:4970ca74fcbc6aaf9f64812f37e31426444d041345541d498b12a819cbe29299_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:527395e13fedf00d5ffa4a2c70602cab213ff9c826940a529150d6b1df4f7395_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b3ca415e883c09cf8f42f2b1b63ddf007fae7ac183f2185201efecf48489636e_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2456333"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Go\u0027s `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:17a67ac2934041f996b19574bbeffa9e56d8486969785ae219215384cfd4162f_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:18ea59f76a1ddd747712fbb3314f55cfdefb4e12a39ad9f0d22c26d25e8b04b4_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1c687dff9904d440a9efefc95bd82ac1cf10df5c030ee8a3164621bc84e447fc_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:fad58cb6ca31afd96f8ef741cad73c4328c24361dfad022848c227f129c5b4b5_ppc64le"
        ],
        "known_not_affected": [
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:40c83c7127b6b90b9984b3c73b3cbad1c3a8f7af3dc792e5320d6defb9eb22e0_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5b4e3a421f13bd33d03185f4071b3e633767eb06a9875a02ca793d43fd1514c7_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:93e605c4231903b7a73e7578f8977a5c6029c767ab801f29b726d2e6ff290feb_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d9bc0d110bbc7b7ec8a2401f34cde12e470980086bb04fc532a9885917c06b7f_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ee6505e36b31ecc38b080c2e56b7b26afd3c7db9b30d17947e6bcb6cf7f0e44e_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:01271821684bdb4791a1e757092e3799247ac91519f8516599c7cf9080407076_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:958178be4fc3798cdd531660e14514c370ac334b8a27a31a8f08db3244f17341_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:b881afc31c6e287608699dfc9d38bf38ff3616b2b133cc4726f0060ce99b16de_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:c237813ec28c79232f1f8d5bb2f875157323d10ddceddf3f722cd885c3c5c4d5_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:15b1be865c1d4df2fd1171acb46922ba864555b18dfc71febd372e11a5d0eb8e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:55c2e8cbb4c7e89ed719c136d401c1fa49198e4a98a2dfe78c5eacb5ee2cadc8_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8d334ebdf403e2a15a664c1960044c6852f3e00b55ce2f2e808f6213ae70e00f_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ceb52082d9002ba1762e6653bc39b4253f05a7cd58a42c664c7a658e6133a7e8_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:21c630e1de77a6e18b0b774ebfc5ccef2191fef60da0c7914d0a81d5be236ea3_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:51538cb4de3a2767509d5a7869f9a63a054416e7163c38714bce9bd83da1b619_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:902fe34ead11574878df61323db6ac53f3ad55d13d40f72b8d514ea0356e1a81_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bff77adab78f874b962324a9674157383dfe4570309d24c7b2a6acebead62a39_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2a0befa5c4dbcb56ef33f46ccdb27d5e02f8f5facdbf2fa0b9c6e6dd53a476e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:9ffa7e5a2ed3f92a6eb30792dc878add38b41f7ce5ca03a6f1a2c8b12300070a_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a6a946b8e424db855be70e94c1cab3e5dcf56be8b5caec8d48b3b4579310a25a_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:de70e3309c799110feacba1b6d64bf153818e21790500da6ea75c05f276bedcd_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f49b88b70726cb222fa43685d3a6704ccd8778a2a82b7c5c4aee4b47c54d3bcb_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:11caeb0f6c63f361d12e2c223aa0e1e363c79d8495a008f5b996184dfdd15d57_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:66b2f52b2abd9e3a1fcd1ef4aa926a0f8613730918a2b7743ce61d1ce9b103c7_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:deefcb8674d1899581331ba7899baedb7f9c5355b2b3e4f11b5414b1ae58a8be_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:f980269a8879cd0dced67eec6e2ec9f708b347e4d49981fafccc6c795f73e4cf_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01853cca36a1042f42860bb89048c4a09de76b2cfac412fd78e38fd74376ca39_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:4970ca74fcbc6aaf9f64812f37e31426444d041345541d498b12a819cbe29299_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:527395e13fedf00d5ffa4a2c70602cab213ff9c826940a529150d6b1df4f7395_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b3ca415e883c09cf8f42f2b1b63ddf007fae7ac183f2185201efecf48489636e_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-32281"
        },
        {
          "category": "external",
          "summary": "RHBZ#2456333",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-32281",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/758061",
          "url": "https://go.dev/cl/758061"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/78281",
          "url": "https://go.dev/issue/78281"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
          "url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4946",
          "url": "https://pkg.go.dev/vuln/GO-2026-4946"
        }
      ],
      "release_date": "2026-04-08T01:06:58.354000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-18T16:40:44+00:00",
          "details": "For OpenShift Container Platform 4.21 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/ocp-4-21-release-notes\n\nFor Red Hat OpenShift Logging 6.5, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.5",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:17a67ac2934041f996b19574bbeffa9e56d8486969785ae219215384cfd4162f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:18ea59f76a1ddd747712fbb3314f55cfdefb4e12a39ad9f0d22c26d25e8b04b4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1c687dff9904d440a9efefc95bd82ac1cf10df5c030ee8a3164621bc84e447fc_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:fad58cb6ca31afd96f8ef741cad73c4328c24361dfad022848c227f129c5b4b5_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:56340"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:40c83c7127b6b90b9984b3c73b3cbad1c3a8f7af3dc792e5320d6defb9eb22e0_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5b4e3a421f13bd33d03185f4071b3e633767eb06a9875a02ca793d43fd1514c7_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:93e605c4231903b7a73e7578f8977a5c6029c767ab801f29b726d2e6ff290feb_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d9bc0d110bbc7b7ec8a2401f34cde12e470980086bb04fc532a9885917c06b7f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ee6505e36b31ecc38b080c2e56b7b26afd3c7db9b30d17947e6bcb6cf7f0e44e_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:01271821684bdb4791a1e757092e3799247ac91519f8516599c7cf9080407076_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:958178be4fc3798cdd531660e14514c370ac334b8a27a31a8f08db3244f17341_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:b881afc31c6e287608699dfc9d38bf38ff3616b2b133cc4726f0060ce99b16de_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:c237813ec28c79232f1f8d5bb2f875157323d10ddceddf3f722cd885c3c5c4d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:15b1be865c1d4df2fd1171acb46922ba864555b18dfc71febd372e11a5d0eb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:55c2e8cbb4c7e89ed719c136d401c1fa49198e4a98a2dfe78c5eacb5ee2cadc8_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8d334ebdf403e2a15a664c1960044c6852f3e00b55ce2f2e808f6213ae70e00f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ceb52082d9002ba1762e6653bc39b4253f05a7cd58a42c664c7a658e6133a7e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:17a67ac2934041f996b19574bbeffa9e56d8486969785ae219215384cfd4162f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:18ea59f76a1ddd747712fbb3314f55cfdefb4e12a39ad9f0d22c26d25e8b04b4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1c687dff9904d440a9efefc95bd82ac1cf10df5c030ee8a3164621bc84e447fc_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:fad58cb6ca31afd96f8ef741cad73c4328c24361dfad022848c227f129c5b4b5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:21c630e1de77a6e18b0b774ebfc5ccef2191fef60da0c7914d0a81d5be236ea3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:51538cb4de3a2767509d5a7869f9a63a054416e7163c38714bce9bd83da1b619_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:902fe34ead11574878df61323db6ac53f3ad55d13d40f72b8d514ea0356e1a81_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bff77adab78f874b962324a9674157383dfe4570309d24c7b2a6acebead62a39_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2a0befa5c4dbcb56ef33f46ccdb27d5e02f8f5facdbf2fa0b9c6e6dd53a476e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:9ffa7e5a2ed3f92a6eb30792dc878add38b41f7ce5ca03a6f1a2c8b12300070a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a6a946b8e424db855be70e94c1cab3e5dcf56be8b5caec8d48b3b4579310a25a_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:de70e3309c799110feacba1b6d64bf153818e21790500da6ea75c05f276bedcd_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f49b88b70726cb222fa43685d3a6704ccd8778a2a82b7c5c4aee4b47c54d3bcb_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:11caeb0f6c63f361d12e2c223aa0e1e363c79d8495a008f5b996184dfdd15d57_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:66b2f52b2abd9e3a1fcd1ef4aa926a0f8613730918a2b7743ce61d1ce9b103c7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:deefcb8674d1899581331ba7899baedb7f9c5355b2b3e4f11b5414b1ae58a8be_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:f980269a8879cd0dced67eec6e2ec9f708b347e4d49981fafccc6c795f73e4cf_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01853cca36a1042f42860bb89048c4a09de76b2cfac412fd78e38fd74376ca39_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:4970ca74fcbc6aaf9f64812f37e31426444d041345541d498b12a819cbe29299_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:527395e13fedf00d5ffa4a2c70602cab213ff9c826940a529150d6b1df4f7395_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b3ca415e883c09cf8f42f2b1b63ddf007fae7ac183f2185201efecf48489636e_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:40c83c7127b6b90b9984b3c73b3cbad1c3a8f7af3dc792e5320d6defb9eb22e0_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5b4e3a421f13bd33d03185f4071b3e633767eb06a9875a02ca793d43fd1514c7_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:93e605c4231903b7a73e7578f8977a5c6029c767ab801f29b726d2e6ff290feb_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d9bc0d110bbc7b7ec8a2401f34cde12e470980086bb04fc532a9885917c06b7f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ee6505e36b31ecc38b080c2e56b7b26afd3c7db9b30d17947e6bcb6cf7f0e44e_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:01271821684bdb4791a1e757092e3799247ac91519f8516599c7cf9080407076_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:958178be4fc3798cdd531660e14514c370ac334b8a27a31a8f08db3244f17341_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:b881afc31c6e287608699dfc9d38bf38ff3616b2b133cc4726f0060ce99b16de_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:c237813ec28c79232f1f8d5bb2f875157323d10ddceddf3f722cd885c3c5c4d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:15b1be865c1d4df2fd1171acb46922ba864555b18dfc71febd372e11a5d0eb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:55c2e8cbb4c7e89ed719c136d401c1fa49198e4a98a2dfe78c5eacb5ee2cadc8_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8d334ebdf403e2a15a664c1960044c6852f3e00b55ce2f2e808f6213ae70e00f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ceb52082d9002ba1762e6653bc39b4253f05a7cd58a42c664c7a658e6133a7e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:17a67ac2934041f996b19574bbeffa9e56d8486969785ae219215384cfd4162f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:18ea59f76a1ddd747712fbb3314f55cfdefb4e12a39ad9f0d22c26d25e8b04b4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1c687dff9904d440a9efefc95bd82ac1cf10df5c030ee8a3164621bc84e447fc_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:fad58cb6ca31afd96f8ef741cad73c4328c24361dfad022848c227f129c5b4b5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:21c630e1de77a6e18b0b774ebfc5ccef2191fef60da0c7914d0a81d5be236ea3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:51538cb4de3a2767509d5a7869f9a63a054416e7163c38714bce9bd83da1b619_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:902fe34ead11574878df61323db6ac53f3ad55d13d40f72b8d514ea0356e1a81_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bff77adab78f874b962324a9674157383dfe4570309d24c7b2a6acebead62a39_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2a0befa5c4dbcb56ef33f46ccdb27d5e02f8f5facdbf2fa0b9c6e6dd53a476e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:9ffa7e5a2ed3f92a6eb30792dc878add38b41f7ce5ca03a6f1a2c8b12300070a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a6a946b8e424db855be70e94c1cab3e5dcf56be8b5caec8d48b3b4579310a25a_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:de70e3309c799110feacba1b6d64bf153818e21790500da6ea75c05f276bedcd_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f49b88b70726cb222fa43685d3a6704ccd8778a2a82b7c5c4aee4b47c54d3bcb_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:11caeb0f6c63f361d12e2c223aa0e1e363c79d8495a008f5b996184dfdd15d57_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:66b2f52b2abd9e3a1fcd1ef4aa926a0f8613730918a2b7743ce61d1ce9b103c7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:deefcb8674d1899581331ba7899baedb7f9c5355b2b3e4f11b5414b1ae58a8be_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:f980269a8879cd0dced67eec6e2ec9f708b347e4d49981fafccc6c795f73e4cf_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01853cca36a1042f42860bb89048c4a09de76b2cfac412fd78e38fd74376ca39_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:4970ca74fcbc6aaf9f64812f37e31426444d041345541d498b12a819cbe29299_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:527395e13fedf00d5ffa4a2c70602cab213ff9c826940a529150d6b1df4f7395_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b3ca415e883c09cf8f42f2b1b63ddf007fae7ac183f2185201efecf48489636e_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
    },
    {
      "cve": "CVE-2026-32282",
      "cwe": {
        "id": "CWE-367",
        "name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
      },
      "discovery_date": "2026-04-08T02:01:12.683211+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:40c83c7127b6b90b9984b3c73b3cbad1c3a8f7af3dc792e5320d6defb9eb22e0_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5b4e3a421f13bd33d03185f4071b3e633767eb06a9875a02ca793d43fd1514c7_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:93e605c4231903b7a73e7578f8977a5c6029c767ab801f29b726d2e6ff290feb_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d9bc0d110bbc7b7ec8a2401f34cde12e470980086bb04fc532a9885917c06b7f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ee6505e36b31ecc38b080c2e56b7b26afd3c7db9b30d17947e6bcb6cf7f0e44e_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:01271821684bdb4791a1e757092e3799247ac91519f8516599c7cf9080407076_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:958178be4fc3798cdd531660e14514c370ac334b8a27a31a8f08db3244f17341_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:b881afc31c6e287608699dfc9d38bf38ff3616b2b133cc4726f0060ce99b16de_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:c237813ec28c79232f1f8d5bb2f875157323d10ddceddf3f722cd885c3c5c4d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:15b1be865c1d4df2fd1171acb46922ba864555b18dfc71febd372e11a5d0eb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:55c2e8cbb4c7e89ed719c136d401c1fa49198e4a98a2dfe78c5eacb5ee2cadc8_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8d334ebdf403e2a15a664c1960044c6852f3e00b55ce2f2e808f6213ae70e00f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ceb52082d9002ba1762e6653bc39b4253f05a7cd58a42c664c7a658e6133a7e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:21c630e1de77a6e18b0b774ebfc5ccef2191fef60da0c7914d0a81d5be236ea3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:51538cb4de3a2767509d5a7869f9a63a054416e7163c38714bce9bd83da1b619_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:902fe34ead11574878df61323db6ac53f3ad55d13d40f72b8d514ea0356e1a81_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bff77adab78f874b962324a9674157383dfe4570309d24c7b2a6acebead62a39_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2a0befa5c4dbcb56ef33f46ccdb27d5e02f8f5facdbf2fa0b9c6e6dd53a476e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:9ffa7e5a2ed3f92a6eb30792dc878add38b41f7ce5ca03a6f1a2c8b12300070a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a6a946b8e424db855be70e94c1cab3e5dcf56be8b5caec8d48b3b4579310a25a_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:de70e3309c799110feacba1b6d64bf153818e21790500da6ea75c05f276bedcd_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f49b88b70726cb222fa43685d3a6704ccd8778a2a82b7c5c4aee4b47c54d3bcb_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:11caeb0f6c63f361d12e2c223aa0e1e363c79d8495a008f5b996184dfdd15d57_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:66b2f52b2abd9e3a1fcd1ef4aa926a0f8613730918a2b7743ce61d1ce9b103c7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:deefcb8674d1899581331ba7899baedb7f9c5355b2b3e4f11b5414b1ae58a8be_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:f980269a8879cd0dced67eec6e2ec9f708b347e4d49981fafccc6c795f73e4cf_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01853cca36a1042f42860bb89048c4a09de76b2cfac412fd78e38fd74376ca39_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:4970ca74fcbc6aaf9f64812f37e31426444d041345541d498b12a819cbe29299_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:527395e13fedf00d5ffa4a2c70602cab213ff9c826940a529150d6b1df4f7395_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b3ca415e883c09cf8f42f2b1b63ddf007fae7ac183f2185201efecf48489636e_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2456336"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, an attacker needs access to the system and the required permissions to create a symbolic link. Additionally, the attacker must swap the target file with a symbolic link in the exact window after the `Root.Chmod` function checks its target but before acting. Due to these conditions, this flaw has been rated with a moderate severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:17a67ac2934041f996b19574bbeffa9e56d8486969785ae219215384cfd4162f_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:18ea59f76a1ddd747712fbb3314f55cfdefb4e12a39ad9f0d22c26d25e8b04b4_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1c687dff9904d440a9efefc95bd82ac1cf10df5c030ee8a3164621bc84e447fc_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:fad58cb6ca31afd96f8ef741cad73c4328c24361dfad022848c227f129c5b4b5_ppc64le"
        ],
        "known_not_affected": [
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:40c83c7127b6b90b9984b3c73b3cbad1c3a8f7af3dc792e5320d6defb9eb22e0_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5b4e3a421f13bd33d03185f4071b3e633767eb06a9875a02ca793d43fd1514c7_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:93e605c4231903b7a73e7578f8977a5c6029c767ab801f29b726d2e6ff290feb_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d9bc0d110bbc7b7ec8a2401f34cde12e470980086bb04fc532a9885917c06b7f_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ee6505e36b31ecc38b080c2e56b7b26afd3c7db9b30d17947e6bcb6cf7f0e44e_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:01271821684bdb4791a1e757092e3799247ac91519f8516599c7cf9080407076_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:958178be4fc3798cdd531660e14514c370ac334b8a27a31a8f08db3244f17341_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:b881afc31c6e287608699dfc9d38bf38ff3616b2b133cc4726f0060ce99b16de_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:c237813ec28c79232f1f8d5bb2f875157323d10ddceddf3f722cd885c3c5c4d5_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:15b1be865c1d4df2fd1171acb46922ba864555b18dfc71febd372e11a5d0eb8e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:55c2e8cbb4c7e89ed719c136d401c1fa49198e4a98a2dfe78c5eacb5ee2cadc8_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8d334ebdf403e2a15a664c1960044c6852f3e00b55ce2f2e808f6213ae70e00f_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ceb52082d9002ba1762e6653bc39b4253f05a7cd58a42c664c7a658e6133a7e8_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:21c630e1de77a6e18b0b774ebfc5ccef2191fef60da0c7914d0a81d5be236ea3_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:51538cb4de3a2767509d5a7869f9a63a054416e7163c38714bce9bd83da1b619_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:902fe34ead11574878df61323db6ac53f3ad55d13d40f72b8d514ea0356e1a81_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bff77adab78f874b962324a9674157383dfe4570309d24c7b2a6acebead62a39_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2a0befa5c4dbcb56ef33f46ccdb27d5e02f8f5facdbf2fa0b9c6e6dd53a476e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:9ffa7e5a2ed3f92a6eb30792dc878add38b41f7ce5ca03a6f1a2c8b12300070a_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a6a946b8e424db855be70e94c1cab3e5dcf56be8b5caec8d48b3b4579310a25a_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:de70e3309c799110feacba1b6d64bf153818e21790500da6ea75c05f276bedcd_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f49b88b70726cb222fa43685d3a6704ccd8778a2a82b7c5c4aee4b47c54d3bcb_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:11caeb0f6c63f361d12e2c223aa0e1e363c79d8495a008f5b996184dfdd15d57_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:66b2f52b2abd9e3a1fcd1ef4aa926a0f8613730918a2b7743ce61d1ce9b103c7_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:deefcb8674d1899581331ba7899baedb7f9c5355b2b3e4f11b5414b1ae58a8be_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:f980269a8879cd0dced67eec6e2ec9f708b347e4d49981fafccc6c795f73e4cf_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01853cca36a1042f42860bb89048c4a09de76b2cfac412fd78e38fd74376ca39_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:4970ca74fcbc6aaf9f64812f37e31426444d041345541d498b12a819cbe29299_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:527395e13fedf00d5ffa4a2c70602cab213ff9c826940a529150d6b1df4f7395_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b3ca415e883c09cf8f42f2b1b63ddf007fae7ac183f2185201efecf48489636e_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-32282"
        },
        {
          "category": "external",
          "summary": "RHBZ#2456336",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456336"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-32282",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-32282"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/763761",
          "url": "https://go.dev/cl/763761"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/78293",
          "url": "https://go.dev/issue/78293"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
          "url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4864",
          "url": "https://pkg.go.dev/vuln/GO-2026-4864"
        }
      ],
      "release_date": "2026-04-08T01:06:55.953000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-18T16:40:44+00:00",
          "details": "For OpenShift Container Platform 4.21 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/ocp-4-21-release-notes\n\nFor Red Hat OpenShift Logging 6.5, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.5",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:17a67ac2934041f996b19574bbeffa9e56d8486969785ae219215384cfd4162f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:18ea59f76a1ddd747712fbb3314f55cfdefb4e12a39ad9f0d22c26d25e8b04b4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1c687dff9904d440a9efefc95bd82ac1cf10df5c030ee8a3164621bc84e447fc_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:fad58cb6ca31afd96f8ef741cad73c4328c24361dfad022848c227f129c5b4b5_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:56340"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:40c83c7127b6b90b9984b3c73b3cbad1c3a8f7af3dc792e5320d6defb9eb22e0_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5b4e3a421f13bd33d03185f4071b3e633767eb06a9875a02ca793d43fd1514c7_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:93e605c4231903b7a73e7578f8977a5c6029c767ab801f29b726d2e6ff290feb_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d9bc0d110bbc7b7ec8a2401f34cde12e470980086bb04fc532a9885917c06b7f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ee6505e36b31ecc38b080c2e56b7b26afd3c7db9b30d17947e6bcb6cf7f0e44e_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:01271821684bdb4791a1e757092e3799247ac91519f8516599c7cf9080407076_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:958178be4fc3798cdd531660e14514c370ac334b8a27a31a8f08db3244f17341_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:b881afc31c6e287608699dfc9d38bf38ff3616b2b133cc4726f0060ce99b16de_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:c237813ec28c79232f1f8d5bb2f875157323d10ddceddf3f722cd885c3c5c4d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:15b1be865c1d4df2fd1171acb46922ba864555b18dfc71febd372e11a5d0eb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:55c2e8cbb4c7e89ed719c136d401c1fa49198e4a98a2dfe78c5eacb5ee2cadc8_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8d334ebdf403e2a15a664c1960044c6852f3e00b55ce2f2e808f6213ae70e00f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ceb52082d9002ba1762e6653bc39b4253f05a7cd58a42c664c7a658e6133a7e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:17a67ac2934041f996b19574bbeffa9e56d8486969785ae219215384cfd4162f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:18ea59f76a1ddd747712fbb3314f55cfdefb4e12a39ad9f0d22c26d25e8b04b4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1c687dff9904d440a9efefc95bd82ac1cf10df5c030ee8a3164621bc84e447fc_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:fad58cb6ca31afd96f8ef741cad73c4328c24361dfad022848c227f129c5b4b5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:21c630e1de77a6e18b0b774ebfc5ccef2191fef60da0c7914d0a81d5be236ea3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:51538cb4de3a2767509d5a7869f9a63a054416e7163c38714bce9bd83da1b619_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:902fe34ead11574878df61323db6ac53f3ad55d13d40f72b8d514ea0356e1a81_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bff77adab78f874b962324a9674157383dfe4570309d24c7b2a6acebead62a39_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2a0befa5c4dbcb56ef33f46ccdb27d5e02f8f5facdbf2fa0b9c6e6dd53a476e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:9ffa7e5a2ed3f92a6eb30792dc878add38b41f7ce5ca03a6f1a2c8b12300070a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a6a946b8e424db855be70e94c1cab3e5dcf56be8b5caec8d48b3b4579310a25a_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:de70e3309c799110feacba1b6d64bf153818e21790500da6ea75c05f276bedcd_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f49b88b70726cb222fa43685d3a6704ccd8778a2a82b7c5c4aee4b47c54d3bcb_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:11caeb0f6c63f361d12e2c223aa0e1e363c79d8495a008f5b996184dfdd15d57_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:66b2f52b2abd9e3a1fcd1ef4aa926a0f8613730918a2b7743ce61d1ce9b103c7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:deefcb8674d1899581331ba7899baedb7f9c5355b2b3e4f11b5414b1ae58a8be_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:f980269a8879cd0dced67eec6e2ec9f708b347e4d49981fafccc6c795f73e4cf_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01853cca36a1042f42860bb89048c4a09de76b2cfac412fd78e38fd74376ca39_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:4970ca74fcbc6aaf9f64812f37e31426444d041345541d498b12a819cbe29299_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:527395e13fedf00d5ffa4a2c70602cab213ff9c826940a529150d6b1df4f7395_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b3ca415e883c09cf8f42f2b1b63ddf007fae7ac183f2185201efecf48489636e_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:40c83c7127b6b90b9984b3c73b3cbad1c3a8f7af3dc792e5320d6defb9eb22e0_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5b4e3a421f13bd33d03185f4071b3e633767eb06a9875a02ca793d43fd1514c7_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:93e605c4231903b7a73e7578f8977a5c6029c767ab801f29b726d2e6ff290feb_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d9bc0d110bbc7b7ec8a2401f34cde12e470980086bb04fc532a9885917c06b7f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ee6505e36b31ecc38b080c2e56b7b26afd3c7db9b30d17947e6bcb6cf7f0e44e_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:01271821684bdb4791a1e757092e3799247ac91519f8516599c7cf9080407076_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:958178be4fc3798cdd531660e14514c370ac334b8a27a31a8f08db3244f17341_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:b881afc31c6e287608699dfc9d38bf38ff3616b2b133cc4726f0060ce99b16de_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:c237813ec28c79232f1f8d5bb2f875157323d10ddceddf3f722cd885c3c5c4d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:15b1be865c1d4df2fd1171acb46922ba864555b18dfc71febd372e11a5d0eb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:55c2e8cbb4c7e89ed719c136d401c1fa49198e4a98a2dfe78c5eacb5ee2cadc8_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8d334ebdf403e2a15a664c1960044c6852f3e00b55ce2f2e808f6213ae70e00f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ceb52082d9002ba1762e6653bc39b4253f05a7cd58a42c664c7a658e6133a7e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:17a67ac2934041f996b19574bbeffa9e56d8486969785ae219215384cfd4162f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:18ea59f76a1ddd747712fbb3314f55cfdefb4e12a39ad9f0d22c26d25e8b04b4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1c687dff9904d440a9efefc95bd82ac1cf10df5c030ee8a3164621bc84e447fc_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:fad58cb6ca31afd96f8ef741cad73c4328c24361dfad022848c227f129c5b4b5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:21c630e1de77a6e18b0b774ebfc5ccef2191fef60da0c7914d0a81d5be236ea3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:51538cb4de3a2767509d5a7869f9a63a054416e7163c38714bce9bd83da1b619_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:902fe34ead11574878df61323db6ac53f3ad55d13d40f72b8d514ea0356e1a81_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bff77adab78f874b962324a9674157383dfe4570309d24c7b2a6acebead62a39_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2a0befa5c4dbcb56ef33f46ccdb27d5e02f8f5facdbf2fa0b9c6e6dd53a476e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:9ffa7e5a2ed3f92a6eb30792dc878add38b41f7ce5ca03a6f1a2c8b12300070a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a6a946b8e424db855be70e94c1cab3e5dcf56be8b5caec8d48b3b4579310a25a_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:de70e3309c799110feacba1b6d64bf153818e21790500da6ea75c05f276bedcd_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f49b88b70726cb222fa43685d3a6704ccd8778a2a82b7c5c4aee4b47c54d3bcb_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:11caeb0f6c63f361d12e2c223aa0e1e363c79d8495a008f5b996184dfdd15d57_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:66b2f52b2abd9e3a1fcd1ef4aa926a0f8613730918a2b7743ce61d1ce9b103c7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:deefcb8674d1899581331ba7899baedb7f9c5355b2b3e4f11b5414b1ae58a8be_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:f980269a8879cd0dced67eec6e2ec9f708b347e4d49981fafccc6c795f73e4cf_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01853cca36a1042f42860bb89048c4a09de76b2cfac412fd78e38fd74376ca39_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:4970ca74fcbc6aaf9f64812f37e31426444d041345541d498b12a819cbe29299_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:527395e13fedf00d5ffa4a2c70602cab213ff9c826940a529150d6b1df4f7395_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b3ca415e883c09cf8f42f2b1b63ddf007fae7ac183f2185201efecf48489636e_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root"
    },
    {
      "cve": "CVE-2026-33811",
      "cwe": {
        "id": "CWE-1341",
        "name": "Multiple Releases of Same Resource or Handle"
      },
      "discovery_date": "2026-05-07T20:01:34.913869+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:40c83c7127b6b90b9984b3c73b3cbad1c3a8f7af3dc792e5320d6defb9eb22e0_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5b4e3a421f13bd33d03185f4071b3e633767eb06a9875a02ca793d43fd1514c7_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:93e605c4231903b7a73e7578f8977a5c6029c767ab801f29b726d2e6ff290feb_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d9bc0d110bbc7b7ec8a2401f34cde12e470980086bb04fc532a9885917c06b7f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ee6505e36b31ecc38b080c2e56b7b26afd3c7db9b30d17947e6bcb6cf7f0e44e_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:01271821684bdb4791a1e757092e3799247ac91519f8516599c7cf9080407076_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:958178be4fc3798cdd531660e14514c370ac334b8a27a31a8f08db3244f17341_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:b881afc31c6e287608699dfc9d38bf38ff3616b2b133cc4726f0060ce99b16de_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:c237813ec28c79232f1f8d5bb2f875157323d10ddceddf3f722cd885c3c5c4d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:15b1be865c1d4df2fd1171acb46922ba864555b18dfc71febd372e11a5d0eb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:55c2e8cbb4c7e89ed719c136d401c1fa49198e4a98a2dfe78c5eacb5ee2cadc8_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8d334ebdf403e2a15a664c1960044c6852f3e00b55ce2f2e808f6213ae70e00f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ceb52082d9002ba1762e6653bc39b4253f05a7cd58a42c664c7a658e6133a7e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:21c630e1de77a6e18b0b774ebfc5ccef2191fef60da0c7914d0a81d5be236ea3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:51538cb4de3a2767509d5a7869f9a63a054416e7163c38714bce9bd83da1b619_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:902fe34ead11574878df61323db6ac53f3ad55d13d40f72b8d514ea0356e1a81_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bff77adab78f874b962324a9674157383dfe4570309d24c7b2a6acebead62a39_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2a0befa5c4dbcb56ef33f46ccdb27d5e02f8f5facdbf2fa0b9c6e6dd53a476e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:9ffa7e5a2ed3f92a6eb30792dc878add38b41f7ce5ca03a6f1a2c8b12300070a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a6a946b8e424db855be70e94c1cab3e5dcf56be8b5caec8d48b3b4579310a25a_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:de70e3309c799110feacba1b6d64bf153818e21790500da6ea75c05f276bedcd_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f49b88b70726cb222fa43685d3a6704ccd8778a2a82b7c5c4aee4b47c54d3bcb_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:11caeb0f6c63f361d12e2c223aa0e1e363c79d8495a008f5b996184dfdd15d57_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:66b2f52b2abd9e3a1fcd1ef4aa926a0f8613730918a2b7743ce61d1ce9b103c7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:deefcb8674d1899581331ba7899baedb7f9c5355b2b3e4f11b5414b1ae58a8be_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:f980269a8879cd0dced67eec6e2ec9f708b347e4d49981fafccc6c795f73e4cf_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01853cca36a1042f42860bb89048c4a09de76b2cfac412fd78e38fd74376ca39_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:4970ca74fcbc6aaf9f64812f37e31426444d041345541d498b12a819cbe29299_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:527395e13fedf00d5ffa4a2c70602cab213ff9c826940a529150d6b1df4f7395_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b3ca415e883c09cf8f42f2b1b63ddf007fae7ac183f2185201efecf48489636e_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2467822"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:17a67ac2934041f996b19574bbeffa9e56d8486969785ae219215384cfd4162f_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:18ea59f76a1ddd747712fbb3314f55cfdefb4e12a39ad9f0d22c26d25e8b04b4_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1c687dff9904d440a9efefc95bd82ac1cf10df5c030ee8a3164621bc84e447fc_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:fad58cb6ca31afd96f8ef741cad73c4328c24361dfad022848c227f129c5b4b5_ppc64le"
        ],
        "known_not_affected": [
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:40c83c7127b6b90b9984b3c73b3cbad1c3a8f7af3dc792e5320d6defb9eb22e0_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5b4e3a421f13bd33d03185f4071b3e633767eb06a9875a02ca793d43fd1514c7_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:93e605c4231903b7a73e7578f8977a5c6029c767ab801f29b726d2e6ff290feb_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d9bc0d110bbc7b7ec8a2401f34cde12e470980086bb04fc532a9885917c06b7f_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ee6505e36b31ecc38b080c2e56b7b26afd3c7db9b30d17947e6bcb6cf7f0e44e_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:01271821684bdb4791a1e757092e3799247ac91519f8516599c7cf9080407076_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:958178be4fc3798cdd531660e14514c370ac334b8a27a31a8f08db3244f17341_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:b881afc31c6e287608699dfc9d38bf38ff3616b2b133cc4726f0060ce99b16de_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:c237813ec28c79232f1f8d5bb2f875157323d10ddceddf3f722cd885c3c5c4d5_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:15b1be865c1d4df2fd1171acb46922ba864555b18dfc71febd372e11a5d0eb8e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:55c2e8cbb4c7e89ed719c136d401c1fa49198e4a98a2dfe78c5eacb5ee2cadc8_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8d334ebdf403e2a15a664c1960044c6852f3e00b55ce2f2e808f6213ae70e00f_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ceb52082d9002ba1762e6653bc39b4253f05a7cd58a42c664c7a658e6133a7e8_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:21c630e1de77a6e18b0b774ebfc5ccef2191fef60da0c7914d0a81d5be236ea3_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:51538cb4de3a2767509d5a7869f9a63a054416e7163c38714bce9bd83da1b619_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:902fe34ead11574878df61323db6ac53f3ad55d13d40f72b8d514ea0356e1a81_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bff77adab78f874b962324a9674157383dfe4570309d24c7b2a6acebead62a39_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2a0befa5c4dbcb56ef33f46ccdb27d5e02f8f5facdbf2fa0b9c6e6dd53a476e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:9ffa7e5a2ed3f92a6eb30792dc878add38b41f7ce5ca03a6f1a2c8b12300070a_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a6a946b8e424db855be70e94c1cab3e5dcf56be8b5caec8d48b3b4579310a25a_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:de70e3309c799110feacba1b6d64bf153818e21790500da6ea75c05f276bedcd_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f49b88b70726cb222fa43685d3a6704ccd8778a2a82b7c5c4aee4b47c54d3bcb_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:11caeb0f6c63f361d12e2c223aa0e1e363c79d8495a008f5b996184dfdd15d57_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:66b2f52b2abd9e3a1fcd1ef4aa926a0f8613730918a2b7743ce61d1ce9b103c7_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:deefcb8674d1899581331ba7899baedb7f9c5355b2b3e4f11b5414b1ae58a8be_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:f980269a8879cd0dced67eec6e2ec9f708b347e4d49981fafccc6c795f73e4cf_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01853cca36a1042f42860bb89048c4a09de76b2cfac412fd78e38fd74376ca39_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:4970ca74fcbc6aaf9f64812f37e31426444d041345541d498b12a819cbe29299_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:527395e13fedf00d5ffa4a2c70602cab213ff9c826940a529150d6b1df4f7395_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b3ca415e883c09cf8f42f2b1b63ddf007fae7ac183f2185201efecf48489636e_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33811"
        },
        {
          "category": "external",
          "summary": "RHBZ#2467822",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/767860",
          "url": "https://go.dev/cl/767860"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/78803",
          "url": "https://go.dev/issue/78803"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
          "url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4981",
          "url": "https://pkg.go.dev/vuln/GO-2026-4981"
        }
      ],
      "release_date": "2026-05-07T19:41:19.285000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-18T16:40:44+00:00",
          "details": "For OpenShift Container Platform 4.21 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/ocp-4-21-release-notes\n\nFor Red Hat OpenShift Logging 6.5, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.5",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:17a67ac2934041f996b19574bbeffa9e56d8486969785ae219215384cfd4162f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:18ea59f76a1ddd747712fbb3314f55cfdefb4e12a39ad9f0d22c26d25e8b04b4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1c687dff9904d440a9efefc95bd82ac1cf10df5c030ee8a3164621bc84e447fc_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:fad58cb6ca31afd96f8ef741cad73c4328c24361dfad022848c227f129c5b4b5_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:56340"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:40c83c7127b6b90b9984b3c73b3cbad1c3a8f7af3dc792e5320d6defb9eb22e0_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5b4e3a421f13bd33d03185f4071b3e633767eb06a9875a02ca793d43fd1514c7_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:93e605c4231903b7a73e7578f8977a5c6029c767ab801f29b726d2e6ff290feb_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d9bc0d110bbc7b7ec8a2401f34cde12e470980086bb04fc532a9885917c06b7f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ee6505e36b31ecc38b080c2e56b7b26afd3c7db9b30d17947e6bcb6cf7f0e44e_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:01271821684bdb4791a1e757092e3799247ac91519f8516599c7cf9080407076_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:958178be4fc3798cdd531660e14514c370ac334b8a27a31a8f08db3244f17341_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:b881afc31c6e287608699dfc9d38bf38ff3616b2b133cc4726f0060ce99b16de_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:c237813ec28c79232f1f8d5bb2f875157323d10ddceddf3f722cd885c3c5c4d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:15b1be865c1d4df2fd1171acb46922ba864555b18dfc71febd372e11a5d0eb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:55c2e8cbb4c7e89ed719c136d401c1fa49198e4a98a2dfe78c5eacb5ee2cadc8_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8d334ebdf403e2a15a664c1960044c6852f3e00b55ce2f2e808f6213ae70e00f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ceb52082d9002ba1762e6653bc39b4253f05a7cd58a42c664c7a658e6133a7e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:17a67ac2934041f996b19574bbeffa9e56d8486969785ae219215384cfd4162f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:18ea59f76a1ddd747712fbb3314f55cfdefb4e12a39ad9f0d22c26d25e8b04b4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1c687dff9904d440a9efefc95bd82ac1cf10df5c030ee8a3164621bc84e447fc_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:fad58cb6ca31afd96f8ef741cad73c4328c24361dfad022848c227f129c5b4b5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:21c630e1de77a6e18b0b774ebfc5ccef2191fef60da0c7914d0a81d5be236ea3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:51538cb4de3a2767509d5a7869f9a63a054416e7163c38714bce9bd83da1b619_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:902fe34ead11574878df61323db6ac53f3ad55d13d40f72b8d514ea0356e1a81_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bff77adab78f874b962324a9674157383dfe4570309d24c7b2a6acebead62a39_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2a0befa5c4dbcb56ef33f46ccdb27d5e02f8f5facdbf2fa0b9c6e6dd53a476e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:9ffa7e5a2ed3f92a6eb30792dc878add38b41f7ce5ca03a6f1a2c8b12300070a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a6a946b8e424db855be70e94c1cab3e5dcf56be8b5caec8d48b3b4579310a25a_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:de70e3309c799110feacba1b6d64bf153818e21790500da6ea75c05f276bedcd_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f49b88b70726cb222fa43685d3a6704ccd8778a2a82b7c5c4aee4b47c54d3bcb_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:11caeb0f6c63f361d12e2c223aa0e1e363c79d8495a008f5b996184dfdd15d57_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:66b2f52b2abd9e3a1fcd1ef4aa926a0f8613730918a2b7743ce61d1ce9b103c7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:deefcb8674d1899581331ba7899baedb7f9c5355b2b3e4f11b5414b1ae58a8be_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:f980269a8879cd0dced67eec6e2ec9f708b347e4d49981fafccc6c795f73e4cf_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01853cca36a1042f42860bb89048c4a09de76b2cfac412fd78e38fd74376ca39_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:4970ca74fcbc6aaf9f64812f37e31426444d041345541d498b12a819cbe29299_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:527395e13fedf00d5ffa4a2c70602cab213ff9c826940a529150d6b1df4f7395_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b3ca415e883c09cf8f42f2b1b63ddf007fae7ac183f2185201efecf48489636e_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:40c83c7127b6b90b9984b3c73b3cbad1c3a8f7af3dc792e5320d6defb9eb22e0_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5b4e3a421f13bd33d03185f4071b3e633767eb06a9875a02ca793d43fd1514c7_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:93e605c4231903b7a73e7578f8977a5c6029c767ab801f29b726d2e6ff290feb_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d9bc0d110bbc7b7ec8a2401f34cde12e470980086bb04fc532a9885917c06b7f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ee6505e36b31ecc38b080c2e56b7b26afd3c7db9b30d17947e6bcb6cf7f0e44e_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:01271821684bdb4791a1e757092e3799247ac91519f8516599c7cf9080407076_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:958178be4fc3798cdd531660e14514c370ac334b8a27a31a8f08db3244f17341_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:b881afc31c6e287608699dfc9d38bf38ff3616b2b133cc4726f0060ce99b16de_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:c237813ec28c79232f1f8d5bb2f875157323d10ddceddf3f722cd885c3c5c4d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:15b1be865c1d4df2fd1171acb46922ba864555b18dfc71febd372e11a5d0eb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:55c2e8cbb4c7e89ed719c136d401c1fa49198e4a98a2dfe78c5eacb5ee2cadc8_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8d334ebdf403e2a15a664c1960044c6852f3e00b55ce2f2e808f6213ae70e00f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ceb52082d9002ba1762e6653bc39b4253f05a7cd58a42c664c7a658e6133a7e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:17a67ac2934041f996b19574bbeffa9e56d8486969785ae219215384cfd4162f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:18ea59f76a1ddd747712fbb3314f55cfdefb4e12a39ad9f0d22c26d25e8b04b4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1c687dff9904d440a9efefc95bd82ac1cf10df5c030ee8a3164621bc84e447fc_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:fad58cb6ca31afd96f8ef741cad73c4328c24361dfad022848c227f129c5b4b5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:21c630e1de77a6e18b0b774ebfc5ccef2191fef60da0c7914d0a81d5be236ea3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:51538cb4de3a2767509d5a7869f9a63a054416e7163c38714bce9bd83da1b619_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:902fe34ead11574878df61323db6ac53f3ad55d13d40f72b8d514ea0356e1a81_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bff77adab78f874b962324a9674157383dfe4570309d24c7b2a6acebead62a39_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2a0befa5c4dbcb56ef33f46ccdb27d5e02f8f5facdbf2fa0b9c6e6dd53a476e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:9ffa7e5a2ed3f92a6eb30792dc878add38b41f7ce5ca03a6f1a2c8b12300070a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a6a946b8e424db855be70e94c1cab3e5dcf56be8b5caec8d48b3b4579310a25a_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:de70e3309c799110feacba1b6d64bf153818e21790500da6ea75c05f276bedcd_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f49b88b70726cb222fa43685d3a6704ccd8778a2a82b7c5c4aee4b47c54d3bcb_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:11caeb0f6c63f361d12e2c223aa0e1e363c79d8495a008f5b996184dfdd15d57_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:66b2f52b2abd9e3a1fcd1ef4aa926a0f8613730918a2b7743ce61d1ce9b103c7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:deefcb8674d1899581331ba7899baedb7f9c5355b2b3e4f11b5414b1ae58a8be_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:f980269a8879cd0dced67eec6e2ec9f708b347e4d49981fafccc6c795f73e4cf_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01853cca36a1042f42860bb89048c4a09de76b2cfac412fd78e38fd74376ca39_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:4970ca74fcbc6aaf9f64812f37e31426444d041345541d498b12a819cbe29299_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:527395e13fedf00d5ffa4a2c70602cab213ff9c826940a529150d6b1df4f7395_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b3ca415e883c09cf8f42f2b1b63ddf007fae7ac183f2185201efecf48489636e_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
    },
    {
      "cve": "CVE-2026-33813",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2026-04-21T20:01:02.224363+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:40c83c7127b6b90b9984b3c73b3cbad1c3a8f7af3dc792e5320d6defb9eb22e0_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:01271821684bdb4791a1e757092e3799247ac91519f8516599c7cf9080407076_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:958178be4fc3798cdd531660e14514c370ac334b8a27a31a8f08db3244f17341_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:b881afc31c6e287608699dfc9d38bf38ff3616b2b133cc4726f0060ce99b16de_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:c237813ec28c79232f1f8d5bb2f875157323d10ddceddf3f722cd885c3c5c4d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:15b1be865c1d4df2fd1171acb46922ba864555b18dfc71febd372e11a5d0eb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:55c2e8cbb4c7e89ed719c136d401c1fa49198e4a98a2dfe78c5eacb5ee2cadc8_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8d334ebdf403e2a15a664c1960044c6852f3e00b55ce2f2e808f6213ae70e00f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ceb52082d9002ba1762e6653bc39b4253f05a7cd58a42c664c7a658e6133a7e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:17a67ac2934041f996b19574bbeffa9e56d8486969785ae219215384cfd4162f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:18ea59f76a1ddd747712fbb3314f55cfdefb4e12a39ad9f0d22c26d25e8b04b4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1c687dff9904d440a9efefc95bd82ac1cf10df5c030ee8a3164621bc84e447fc_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:fad58cb6ca31afd96f8ef741cad73c4328c24361dfad022848c227f129c5b4b5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:21c630e1de77a6e18b0b774ebfc5ccef2191fef60da0c7914d0a81d5be236ea3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:51538cb4de3a2767509d5a7869f9a63a054416e7163c38714bce9bd83da1b619_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:902fe34ead11574878df61323db6ac53f3ad55d13d40f72b8d514ea0356e1a81_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bff77adab78f874b962324a9674157383dfe4570309d24c7b2a6acebead62a39_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2a0befa5c4dbcb56ef33f46ccdb27d5e02f8f5facdbf2fa0b9c6e6dd53a476e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:9ffa7e5a2ed3f92a6eb30792dc878add38b41f7ce5ca03a6f1a2c8b12300070a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a6a946b8e424db855be70e94c1cab3e5dcf56be8b5caec8d48b3b4579310a25a_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:de70e3309c799110feacba1b6d64bf153818e21790500da6ea75c05f276bedcd_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f49b88b70726cb222fa43685d3a6704ccd8778a2a82b7c5c4aee4b47c54d3bcb_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:11caeb0f6c63f361d12e2c223aa0e1e363c79d8495a008f5b996184dfdd15d57_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:66b2f52b2abd9e3a1fcd1ef4aa926a0f8613730918a2b7743ce61d1ce9b103c7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:deefcb8674d1899581331ba7899baedb7f9c5355b2b3e4f11b5414b1ae58a8be_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:f980269a8879cd0dced67eec6e2ec9f708b347e4d49981fafccc6c795f73e4cf_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01853cca36a1042f42860bb89048c4a09de76b2cfac412fd78e38fd74376ca39_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:4970ca74fcbc6aaf9f64812f37e31426444d041345541d498b12a819cbe29299_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:527395e13fedf00d5ffa4a2c70602cab213ff9c826940a529150d6b1df4f7395_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b3ca415e883c09cf8f42f2b1b63ddf007fae7ac183f2185201efecf48489636e_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2460221"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/image. A remote attacker could exploit this vulnerability by providing a specially crafted WEBP image with an invalid, large size. This could cause the application to panic and crash on 32-bit platforms, leading to a Denial of Service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/image: golang: golang.org/x/image: Denial of Service via malformed WEBP image parsing",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5b4e3a421f13bd33d03185f4071b3e633767eb06a9875a02ca793d43fd1514c7_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:93e605c4231903b7a73e7578f8977a5c6029c767ab801f29b726d2e6ff290feb_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d9bc0d110bbc7b7ec8a2401f34cde12e470980086bb04fc532a9885917c06b7f_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ee6505e36b31ecc38b080c2e56b7b26afd3c7db9b30d17947e6bcb6cf7f0e44e_s390x"
        ],
        "known_not_affected": [
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:40c83c7127b6b90b9984b3c73b3cbad1c3a8f7af3dc792e5320d6defb9eb22e0_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:01271821684bdb4791a1e757092e3799247ac91519f8516599c7cf9080407076_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:958178be4fc3798cdd531660e14514c370ac334b8a27a31a8f08db3244f17341_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:b881afc31c6e287608699dfc9d38bf38ff3616b2b133cc4726f0060ce99b16de_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:c237813ec28c79232f1f8d5bb2f875157323d10ddceddf3f722cd885c3c5c4d5_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:15b1be865c1d4df2fd1171acb46922ba864555b18dfc71febd372e11a5d0eb8e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:55c2e8cbb4c7e89ed719c136d401c1fa49198e4a98a2dfe78c5eacb5ee2cadc8_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8d334ebdf403e2a15a664c1960044c6852f3e00b55ce2f2e808f6213ae70e00f_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ceb52082d9002ba1762e6653bc39b4253f05a7cd58a42c664c7a658e6133a7e8_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:17a67ac2934041f996b19574bbeffa9e56d8486969785ae219215384cfd4162f_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:18ea59f76a1ddd747712fbb3314f55cfdefb4e12a39ad9f0d22c26d25e8b04b4_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1c687dff9904d440a9efefc95bd82ac1cf10df5c030ee8a3164621bc84e447fc_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:fad58cb6ca31afd96f8ef741cad73c4328c24361dfad022848c227f129c5b4b5_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:21c630e1de77a6e18b0b774ebfc5ccef2191fef60da0c7914d0a81d5be236ea3_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:51538cb4de3a2767509d5a7869f9a63a054416e7163c38714bce9bd83da1b619_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:902fe34ead11574878df61323db6ac53f3ad55d13d40f72b8d514ea0356e1a81_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bff77adab78f874b962324a9674157383dfe4570309d24c7b2a6acebead62a39_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2a0befa5c4dbcb56ef33f46ccdb27d5e02f8f5facdbf2fa0b9c6e6dd53a476e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:9ffa7e5a2ed3f92a6eb30792dc878add38b41f7ce5ca03a6f1a2c8b12300070a_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a6a946b8e424db855be70e94c1cab3e5dcf56be8b5caec8d48b3b4579310a25a_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:de70e3309c799110feacba1b6d64bf153818e21790500da6ea75c05f276bedcd_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f49b88b70726cb222fa43685d3a6704ccd8778a2a82b7c5c4aee4b47c54d3bcb_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:11caeb0f6c63f361d12e2c223aa0e1e363c79d8495a008f5b996184dfdd15d57_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:66b2f52b2abd9e3a1fcd1ef4aa926a0f8613730918a2b7743ce61d1ce9b103c7_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:deefcb8674d1899581331ba7899baedb7f9c5355b2b3e4f11b5414b1ae58a8be_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:f980269a8879cd0dced67eec6e2ec9f708b347e4d49981fafccc6c795f73e4cf_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01853cca36a1042f42860bb89048c4a09de76b2cfac412fd78e38fd74376ca39_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:4970ca74fcbc6aaf9f64812f37e31426444d041345541d498b12a819cbe29299_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:527395e13fedf00d5ffa4a2c70602cab213ff9c826940a529150d6b1df4f7395_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b3ca415e883c09cf8f42f2b1b63ddf007fae7ac183f2185201efecf48489636e_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33813"
        },
        {
          "category": "external",
          "summary": "RHBZ#2460221",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460221"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33813",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33813"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33813",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33813"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/759860",
          "url": "https://go.dev/cl/759860"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/78407",
          "url": "https://go.dev/issue/78407"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4961",
          "url": "https://pkg.go.dev/vuln/GO-2026-4961"
        }
      ],
      "release_date": "2026-04-21T19:21:27.644000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-18T16:40:44+00:00",
          "details": "For OpenShift Container Platform 4.21 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/ocp-4-21-release-notes\n\nFor Red Hat OpenShift Logging 6.5, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.5",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5b4e3a421f13bd33d03185f4071b3e633767eb06a9875a02ca793d43fd1514c7_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:93e605c4231903b7a73e7578f8977a5c6029c767ab801f29b726d2e6ff290feb_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d9bc0d110bbc7b7ec8a2401f34cde12e470980086bb04fc532a9885917c06b7f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ee6505e36b31ecc38b080c2e56b7b26afd3c7db9b30d17947e6bcb6cf7f0e44e_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:56340"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:40c83c7127b6b90b9984b3c73b3cbad1c3a8f7af3dc792e5320d6defb9eb22e0_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5b4e3a421f13bd33d03185f4071b3e633767eb06a9875a02ca793d43fd1514c7_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:93e605c4231903b7a73e7578f8977a5c6029c767ab801f29b726d2e6ff290feb_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d9bc0d110bbc7b7ec8a2401f34cde12e470980086bb04fc532a9885917c06b7f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ee6505e36b31ecc38b080c2e56b7b26afd3c7db9b30d17947e6bcb6cf7f0e44e_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:01271821684bdb4791a1e757092e3799247ac91519f8516599c7cf9080407076_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:958178be4fc3798cdd531660e14514c370ac334b8a27a31a8f08db3244f17341_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:b881afc31c6e287608699dfc9d38bf38ff3616b2b133cc4726f0060ce99b16de_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:c237813ec28c79232f1f8d5bb2f875157323d10ddceddf3f722cd885c3c5c4d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:15b1be865c1d4df2fd1171acb46922ba864555b18dfc71febd372e11a5d0eb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:55c2e8cbb4c7e89ed719c136d401c1fa49198e4a98a2dfe78c5eacb5ee2cadc8_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8d334ebdf403e2a15a664c1960044c6852f3e00b55ce2f2e808f6213ae70e00f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ceb52082d9002ba1762e6653bc39b4253f05a7cd58a42c664c7a658e6133a7e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:17a67ac2934041f996b19574bbeffa9e56d8486969785ae219215384cfd4162f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:18ea59f76a1ddd747712fbb3314f55cfdefb4e12a39ad9f0d22c26d25e8b04b4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1c687dff9904d440a9efefc95bd82ac1cf10df5c030ee8a3164621bc84e447fc_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:fad58cb6ca31afd96f8ef741cad73c4328c24361dfad022848c227f129c5b4b5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:21c630e1de77a6e18b0b774ebfc5ccef2191fef60da0c7914d0a81d5be236ea3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:51538cb4de3a2767509d5a7869f9a63a054416e7163c38714bce9bd83da1b619_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:902fe34ead11574878df61323db6ac53f3ad55d13d40f72b8d514ea0356e1a81_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bff77adab78f874b962324a9674157383dfe4570309d24c7b2a6acebead62a39_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2a0befa5c4dbcb56ef33f46ccdb27d5e02f8f5facdbf2fa0b9c6e6dd53a476e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:9ffa7e5a2ed3f92a6eb30792dc878add38b41f7ce5ca03a6f1a2c8b12300070a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a6a946b8e424db855be70e94c1cab3e5dcf56be8b5caec8d48b3b4579310a25a_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:de70e3309c799110feacba1b6d64bf153818e21790500da6ea75c05f276bedcd_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f49b88b70726cb222fa43685d3a6704ccd8778a2a82b7c5c4aee4b47c54d3bcb_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:11caeb0f6c63f361d12e2c223aa0e1e363c79d8495a008f5b996184dfdd15d57_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:66b2f52b2abd9e3a1fcd1ef4aa926a0f8613730918a2b7743ce61d1ce9b103c7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:deefcb8674d1899581331ba7899baedb7f9c5355b2b3e4f11b5414b1ae58a8be_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:f980269a8879cd0dced67eec6e2ec9f708b347e4d49981fafccc6c795f73e4cf_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01853cca36a1042f42860bb89048c4a09de76b2cfac412fd78e38fd74376ca39_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:4970ca74fcbc6aaf9f64812f37e31426444d041345541d498b12a819cbe29299_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:527395e13fedf00d5ffa4a2c70602cab213ff9c826940a529150d6b1df4f7395_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b3ca415e883c09cf8f42f2b1b63ddf007fae7ac183f2185201efecf48489636e_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "golang.org/x/image: golang: golang.org/x/image: Denial of Service via malformed WEBP image parsing"
    },
    {
      "cve": "CVE-2026-39820",
      "cwe": {
        "id": "CWE-606",
        "name": "Unchecked Input for Loop Condition"
      },
      "discovery_date": "2026-05-07T20:01:27.800929+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:40c83c7127b6b90b9984b3c73b3cbad1c3a8f7af3dc792e5320d6defb9eb22e0_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5b4e3a421f13bd33d03185f4071b3e633767eb06a9875a02ca793d43fd1514c7_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:93e605c4231903b7a73e7578f8977a5c6029c767ab801f29b726d2e6ff290feb_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d9bc0d110bbc7b7ec8a2401f34cde12e470980086bb04fc532a9885917c06b7f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ee6505e36b31ecc38b080c2e56b7b26afd3c7db9b30d17947e6bcb6cf7f0e44e_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:01271821684bdb4791a1e757092e3799247ac91519f8516599c7cf9080407076_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:958178be4fc3798cdd531660e14514c370ac334b8a27a31a8f08db3244f17341_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:b881afc31c6e287608699dfc9d38bf38ff3616b2b133cc4726f0060ce99b16de_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:c237813ec28c79232f1f8d5bb2f875157323d10ddceddf3f722cd885c3c5c4d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:15b1be865c1d4df2fd1171acb46922ba864555b18dfc71febd372e11a5d0eb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:55c2e8cbb4c7e89ed719c136d401c1fa49198e4a98a2dfe78c5eacb5ee2cadc8_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8d334ebdf403e2a15a664c1960044c6852f3e00b55ce2f2e808f6213ae70e00f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ceb52082d9002ba1762e6653bc39b4253f05a7cd58a42c664c7a658e6133a7e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:21c630e1de77a6e18b0b774ebfc5ccef2191fef60da0c7914d0a81d5be236ea3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:51538cb4de3a2767509d5a7869f9a63a054416e7163c38714bce9bd83da1b619_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:902fe34ead11574878df61323db6ac53f3ad55d13d40f72b8d514ea0356e1a81_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bff77adab78f874b962324a9674157383dfe4570309d24c7b2a6acebead62a39_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2a0befa5c4dbcb56ef33f46ccdb27d5e02f8f5facdbf2fa0b9c6e6dd53a476e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:9ffa7e5a2ed3f92a6eb30792dc878add38b41f7ce5ca03a6f1a2c8b12300070a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a6a946b8e424db855be70e94c1cab3e5dcf56be8b5caec8d48b3b4579310a25a_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:de70e3309c799110feacba1b6d64bf153818e21790500da6ea75c05f276bedcd_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f49b88b70726cb222fa43685d3a6704ccd8778a2a82b7c5c4aee4b47c54d3bcb_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:11caeb0f6c63f361d12e2c223aa0e1e363c79d8495a008f5b996184dfdd15d57_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:66b2f52b2abd9e3a1fcd1ef4aa926a0f8613730918a2b7743ce61d1ce9b103c7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:deefcb8674d1899581331ba7899baedb7f9c5355b2b3e4f11b5414b1ae58a8be_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:f980269a8879cd0dced67eec6e2ec9f708b347e4d49981fafccc6c795f73e4cf_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01853cca36a1042f42860bb89048c4a09de76b2cfac412fd78e38fd74376ca39_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:4970ca74fcbc6aaf9f64812f37e31426444d041345541d498b12a819cbe29299_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:527395e13fedf00d5ffa4a2c70602cab213ff9c826940a529150d6b1df4f7395_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b3ca415e883c09cf8f42f2b1b63ddf007fae7ac183f2185201efecf48489636e_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2467820"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:17a67ac2934041f996b19574bbeffa9e56d8486969785ae219215384cfd4162f_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:18ea59f76a1ddd747712fbb3314f55cfdefb4e12a39ad9f0d22c26d25e8b04b4_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1c687dff9904d440a9efefc95bd82ac1cf10df5c030ee8a3164621bc84e447fc_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:fad58cb6ca31afd96f8ef741cad73c4328c24361dfad022848c227f129c5b4b5_ppc64le"
        ],
        "known_not_affected": [
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:40c83c7127b6b90b9984b3c73b3cbad1c3a8f7af3dc792e5320d6defb9eb22e0_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5b4e3a421f13bd33d03185f4071b3e633767eb06a9875a02ca793d43fd1514c7_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:93e605c4231903b7a73e7578f8977a5c6029c767ab801f29b726d2e6ff290feb_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d9bc0d110bbc7b7ec8a2401f34cde12e470980086bb04fc532a9885917c06b7f_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ee6505e36b31ecc38b080c2e56b7b26afd3c7db9b30d17947e6bcb6cf7f0e44e_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:01271821684bdb4791a1e757092e3799247ac91519f8516599c7cf9080407076_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:958178be4fc3798cdd531660e14514c370ac334b8a27a31a8f08db3244f17341_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:b881afc31c6e287608699dfc9d38bf38ff3616b2b133cc4726f0060ce99b16de_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:c237813ec28c79232f1f8d5bb2f875157323d10ddceddf3f722cd885c3c5c4d5_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:15b1be865c1d4df2fd1171acb46922ba864555b18dfc71febd372e11a5d0eb8e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:55c2e8cbb4c7e89ed719c136d401c1fa49198e4a98a2dfe78c5eacb5ee2cadc8_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8d334ebdf403e2a15a664c1960044c6852f3e00b55ce2f2e808f6213ae70e00f_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ceb52082d9002ba1762e6653bc39b4253f05a7cd58a42c664c7a658e6133a7e8_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:21c630e1de77a6e18b0b774ebfc5ccef2191fef60da0c7914d0a81d5be236ea3_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:51538cb4de3a2767509d5a7869f9a63a054416e7163c38714bce9bd83da1b619_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:902fe34ead11574878df61323db6ac53f3ad55d13d40f72b8d514ea0356e1a81_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bff77adab78f874b962324a9674157383dfe4570309d24c7b2a6acebead62a39_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2a0befa5c4dbcb56ef33f46ccdb27d5e02f8f5facdbf2fa0b9c6e6dd53a476e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:9ffa7e5a2ed3f92a6eb30792dc878add38b41f7ce5ca03a6f1a2c8b12300070a_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a6a946b8e424db855be70e94c1cab3e5dcf56be8b5caec8d48b3b4579310a25a_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:de70e3309c799110feacba1b6d64bf153818e21790500da6ea75c05f276bedcd_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f49b88b70726cb222fa43685d3a6704ccd8778a2a82b7c5c4aee4b47c54d3bcb_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:11caeb0f6c63f361d12e2c223aa0e1e363c79d8495a008f5b996184dfdd15d57_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:66b2f52b2abd9e3a1fcd1ef4aa926a0f8613730918a2b7743ce61d1ce9b103c7_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:deefcb8674d1899581331ba7899baedb7f9c5355b2b3e4f11b5414b1ae58a8be_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:f980269a8879cd0dced67eec6e2ec9f708b347e4d49981fafccc6c795f73e4cf_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01853cca36a1042f42860bb89048c4a09de76b2cfac412fd78e38fd74376ca39_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:4970ca74fcbc6aaf9f64812f37e31426444d041345541d498b12a819cbe29299_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:527395e13fedf00d5ffa4a2c70602cab213ff9c826940a529150d6b1df4f7395_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b3ca415e883c09cf8f42f2b1b63ddf007fae7ac183f2185201efecf48489636e_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-39820"
        },
        {
          "category": "external",
          "summary": "RHBZ#2467820",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/759940",
          "url": "https://go.dev/cl/759940"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/78566",
          "url": "https://go.dev/issue/78566"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
          "url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4986",
          "url": "https://pkg.go.dev/vuln/GO-2026-4986"
        }
      ],
      "release_date": "2026-05-07T19:41:19.854000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-18T16:40:44+00:00",
          "details": "For OpenShift Container Platform 4.21 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/ocp-4-21-release-notes\n\nFor Red Hat OpenShift Logging 6.5, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.5",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:17a67ac2934041f996b19574bbeffa9e56d8486969785ae219215384cfd4162f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:18ea59f76a1ddd747712fbb3314f55cfdefb4e12a39ad9f0d22c26d25e8b04b4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1c687dff9904d440a9efefc95bd82ac1cf10df5c030ee8a3164621bc84e447fc_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:fad58cb6ca31afd96f8ef741cad73c4328c24361dfad022848c227f129c5b4b5_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:56340"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:40c83c7127b6b90b9984b3c73b3cbad1c3a8f7af3dc792e5320d6defb9eb22e0_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5b4e3a421f13bd33d03185f4071b3e633767eb06a9875a02ca793d43fd1514c7_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:93e605c4231903b7a73e7578f8977a5c6029c767ab801f29b726d2e6ff290feb_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d9bc0d110bbc7b7ec8a2401f34cde12e470980086bb04fc532a9885917c06b7f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ee6505e36b31ecc38b080c2e56b7b26afd3c7db9b30d17947e6bcb6cf7f0e44e_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:01271821684bdb4791a1e757092e3799247ac91519f8516599c7cf9080407076_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:958178be4fc3798cdd531660e14514c370ac334b8a27a31a8f08db3244f17341_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:b881afc31c6e287608699dfc9d38bf38ff3616b2b133cc4726f0060ce99b16de_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:c237813ec28c79232f1f8d5bb2f875157323d10ddceddf3f722cd885c3c5c4d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:15b1be865c1d4df2fd1171acb46922ba864555b18dfc71febd372e11a5d0eb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:55c2e8cbb4c7e89ed719c136d401c1fa49198e4a98a2dfe78c5eacb5ee2cadc8_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8d334ebdf403e2a15a664c1960044c6852f3e00b55ce2f2e808f6213ae70e00f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ceb52082d9002ba1762e6653bc39b4253f05a7cd58a42c664c7a658e6133a7e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:17a67ac2934041f996b19574bbeffa9e56d8486969785ae219215384cfd4162f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:18ea59f76a1ddd747712fbb3314f55cfdefb4e12a39ad9f0d22c26d25e8b04b4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1c687dff9904d440a9efefc95bd82ac1cf10df5c030ee8a3164621bc84e447fc_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:fad58cb6ca31afd96f8ef741cad73c4328c24361dfad022848c227f129c5b4b5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:21c630e1de77a6e18b0b774ebfc5ccef2191fef60da0c7914d0a81d5be236ea3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:51538cb4de3a2767509d5a7869f9a63a054416e7163c38714bce9bd83da1b619_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:902fe34ead11574878df61323db6ac53f3ad55d13d40f72b8d514ea0356e1a81_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bff77adab78f874b962324a9674157383dfe4570309d24c7b2a6acebead62a39_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2a0befa5c4dbcb56ef33f46ccdb27d5e02f8f5facdbf2fa0b9c6e6dd53a476e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:9ffa7e5a2ed3f92a6eb30792dc878add38b41f7ce5ca03a6f1a2c8b12300070a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a6a946b8e424db855be70e94c1cab3e5dcf56be8b5caec8d48b3b4579310a25a_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:de70e3309c799110feacba1b6d64bf153818e21790500da6ea75c05f276bedcd_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f49b88b70726cb222fa43685d3a6704ccd8778a2a82b7c5c4aee4b47c54d3bcb_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:11caeb0f6c63f361d12e2c223aa0e1e363c79d8495a008f5b996184dfdd15d57_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:66b2f52b2abd9e3a1fcd1ef4aa926a0f8613730918a2b7743ce61d1ce9b103c7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:deefcb8674d1899581331ba7899baedb7f9c5355b2b3e4f11b5414b1ae58a8be_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:f980269a8879cd0dced67eec6e2ec9f708b347e4d49981fafccc6c795f73e4cf_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01853cca36a1042f42860bb89048c4a09de76b2cfac412fd78e38fd74376ca39_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:4970ca74fcbc6aaf9f64812f37e31426444d041345541d498b12a819cbe29299_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:527395e13fedf00d5ffa4a2c70602cab213ff9c826940a529150d6b1df4f7395_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b3ca415e883c09cf8f42f2b1b63ddf007fae7ac183f2185201efecf48489636e_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:40c83c7127b6b90b9984b3c73b3cbad1c3a8f7af3dc792e5320d6defb9eb22e0_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5b4e3a421f13bd33d03185f4071b3e633767eb06a9875a02ca793d43fd1514c7_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:93e605c4231903b7a73e7578f8977a5c6029c767ab801f29b726d2e6ff290feb_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d9bc0d110bbc7b7ec8a2401f34cde12e470980086bb04fc532a9885917c06b7f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ee6505e36b31ecc38b080c2e56b7b26afd3c7db9b30d17947e6bcb6cf7f0e44e_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:01271821684bdb4791a1e757092e3799247ac91519f8516599c7cf9080407076_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:958178be4fc3798cdd531660e14514c370ac334b8a27a31a8f08db3244f17341_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:b881afc31c6e287608699dfc9d38bf38ff3616b2b133cc4726f0060ce99b16de_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:c237813ec28c79232f1f8d5bb2f875157323d10ddceddf3f722cd885c3c5c4d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:15b1be865c1d4df2fd1171acb46922ba864555b18dfc71febd372e11a5d0eb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:55c2e8cbb4c7e89ed719c136d401c1fa49198e4a98a2dfe78c5eacb5ee2cadc8_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8d334ebdf403e2a15a664c1960044c6852f3e00b55ce2f2e808f6213ae70e00f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ceb52082d9002ba1762e6653bc39b4253f05a7cd58a42c664c7a658e6133a7e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:17a67ac2934041f996b19574bbeffa9e56d8486969785ae219215384cfd4162f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:18ea59f76a1ddd747712fbb3314f55cfdefb4e12a39ad9f0d22c26d25e8b04b4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1c687dff9904d440a9efefc95bd82ac1cf10df5c030ee8a3164621bc84e447fc_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:fad58cb6ca31afd96f8ef741cad73c4328c24361dfad022848c227f129c5b4b5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:21c630e1de77a6e18b0b774ebfc5ccef2191fef60da0c7914d0a81d5be236ea3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:51538cb4de3a2767509d5a7869f9a63a054416e7163c38714bce9bd83da1b619_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:902fe34ead11574878df61323db6ac53f3ad55d13d40f72b8d514ea0356e1a81_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bff77adab78f874b962324a9674157383dfe4570309d24c7b2a6acebead62a39_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2a0befa5c4dbcb56ef33f46ccdb27d5e02f8f5facdbf2fa0b9c6e6dd53a476e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:9ffa7e5a2ed3f92a6eb30792dc878add38b41f7ce5ca03a6f1a2c8b12300070a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a6a946b8e424db855be70e94c1cab3e5dcf56be8b5caec8d48b3b4579310a25a_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:de70e3309c799110feacba1b6d64bf153818e21790500da6ea75c05f276bedcd_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f49b88b70726cb222fa43685d3a6704ccd8778a2a82b7c5c4aee4b47c54d3bcb_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:11caeb0f6c63f361d12e2c223aa0e1e363c79d8495a008f5b996184dfdd15d57_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:66b2f52b2abd9e3a1fcd1ef4aa926a0f8613730918a2b7743ce61d1ce9b103c7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:deefcb8674d1899581331ba7899baedb7f9c5355b2b3e4f11b5414b1ae58a8be_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:f980269a8879cd0dced67eec6e2ec9f708b347e4d49981fafccc6c795f73e4cf_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01853cca36a1042f42860bb89048c4a09de76b2cfac412fd78e38fd74376ca39_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:4970ca74fcbc6aaf9f64812f37e31426444d041345541d498b12a819cbe29299_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:527395e13fedf00d5ffa4a2c70602cab213ff9c826940a529150d6b1df4f7395_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b3ca415e883c09cf8f42f2b1b63ddf007fae7ac183f2185201efecf48489636e_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
    },
    {
      "cve": "CVE-2026-39821",
      "cwe": {
        "id": "CWE-1289",
        "name": "Improper Validation of Unsafe Equivalence in Input"
      },
      "discovery_date": "2026-05-22T16:00:52.844126+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:40c83c7127b6b90b9984b3c73b3cbad1c3a8f7af3dc792e5320d6defb9eb22e0_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5b4e3a421f13bd33d03185f4071b3e633767eb06a9875a02ca793d43fd1514c7_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:93e605c4231903b7a73e7578f8977a5c6029c767ab801f29b726d2e6ff290feb_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d9bc0d110bbc7b7ec8a2401f34cde12e470980086bb04fc532a9885917c06b7f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ee6505e36b31ecc38b080c2e56b7b26afd3c7db9b30d17947e6bcb6cf7f0e44e_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:15b1be865c1d4df2fd1171acb46922ba864555b18dfc71febd372e11a5d0eb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:55c2e8cbb4c7e89ed719c136d401c1fa49198e4a98a2dfe78c5eacb5ee2cadc8_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8d334ebdf403e2a15a664c1960044c6852f3e00b55ce2f2e808f6213ae70e00f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ceb52082d9002ba1762e6653bc39b4253f05a7cd58a42c664c7a658e6133a7e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:17a67ac2934041f996b19574bbeffa9e56d8486969785ae219215384cfd4162f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:18ea59f76a1ddd747712fbb3314f55cfdefb4e12a39ad9f0d22c26d25e8b04b4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1c687dff9904d440a9efefc95bd82ac1cf10df5c030ee8a3164621bc84e447fc_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:fad58cb6ca31afd96f8ef741cad73c4328c24361dfad022848c227f129c5b4b5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:21c630e1de77a6e18b0b774ebfc5ccef2191fef60da0c7914d0a81d5be236ea3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:51538cb4de3a2767509d5a7869f9a63a054416e7163c38714bce9bd83da1b619_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:902fe34ead11574878df61323db6ac53f3ad55d13d40f72b8d514ea0356e1a81_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bff77adab78f874b962324a9674157383dfe4570309d24c7b2a6acebead62a39_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2a0befa5c4dbcb56ef33f46ccdb27d5e02f8f5facdbf2fa0b9c6e6dd53a476e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:9ffa7e5a2ed3f92a6eb30792dc878add38b41f7ce5ca03a6f1a2c8b12300070a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a6a946b8e424db855be70e94c1cab3e5dcf56be8b5caec8d48b3b4579310a25a_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:de70e3309c799110feacba1b6d64bf153818e21790500da6ea75c05f276bedcd_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f49b88b70726cb222fa43685d3a6704ccd8778a2a82b7c5c4aee4b47c54d3bcb_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:11caeb0f6c63f361d12e2c223aa0e1e363c79d8495a008f5b996184dfdd15d57_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:66b2f52b2abd9e3a1fcd1ef4aa926a0f8613730918a2b7743ce61d1ce9b103c7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:deefcb8674d1899581331ba7899baedb7f9c5355b2b3e4f11b5414b1ae58a8be_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:f980269a8879cd0dced67eec6e2ec9f708b347e4d49981fafccc6c795f73e4cf_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01853cca36a1042f42860bb89048c4a09de76b2cfac412fd78e38fd74376ca39_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:4970ca74fcbc6aaf9f64812f37e31426444d041345541d498b12a819cbe29299_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:527395e13fedf00d5ffa4a2c70602cab213ff9c826940a529150d6b1df4f7395_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b3ca415e883c09cf8f42f2b1b63ddf007fae7ac183f2185201efecf48489636e_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480756"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:01271821684bdb4791a1e757092e3799247ac91519f8516599c7cf9080407076_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:958178be4fc3798cdd531660e14514c370ac334b8a27a31a8f08db3244f17341_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:b881afc31c6e287608699dfc9d38bf38ff3616b2b133cc4726f0060ce99b16de_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:c237813ec28c79232f1f8d5bb2f875157323d10ddceddf3f722cd885c3c5c4d5_ppc64le"
        ],
        "known_not_affected": [
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:40c83c7127b6b90b9984b3c73b3cbad1c3a8f7af3dc792e5320d6defb9eb22e0_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5b4e3a421f13bd33d03185f4071b3e633767eb06a9875a02ca793d43fd1514c7_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:93e605c4231903b7a73e7578f8977a5c6029c767ab801f29b726d2e6ff290feb_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d9bc0d110bbc7b7ec8a2401f34cde12e470980086bb04fc532a9885917c06b7f_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ee6505e36b31ecc38b080c2e56b7b26afd3c7db9b30d17947e6bcb6cf7f0e44e_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:15b1be865c1d4df2fd1171acb46922ba864555b18dfc71febd372e11a5d0eb8e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:55c2e8cbb4c7e89ed719c136d401c1fa49198e4a98a2dfe78c5eacb5ee2cadc8_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8d334ebdf403e2a15a664c1960044c6852f3e00b55ce2f2e808f6213ae70e00f_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ceb52082d9002ba1762e6653bc39b4253f05a7cd58a42c664c7a658e6133a7e8_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:17a67ac2934041f996b19574bbeffa9e56d8486969785ae219215384cfd4162f_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:18ea59f76a1ddd747712fbb3314f55cfdefb4e12a39ad9f0d22c26d25e8b04b4_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1c687dff9904d440a9efefc95bd82ac1cf10df5c030ee8a3164621bc84e447fc_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:fad58cb6ca31afd96f8ef741cad73c4328c24361dfad022848c227f129c5b4b5_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:21c630e1de77a6e18b0b774ebfc5ccef2191fef60da0c7914d0a81d5be236ea3_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:51538cb4de3a2767509d5a7869f9a63a054416e7163c38714bce9bd83da1b619_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:902fe34ead11574878df61323db6ac53f3ad55d13d40f72b8d514ea0356e1a81_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bff77adab78f874b962324a9674157383dfe4570309d24c7b2a6acebead62a39_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2a0befa5c4dbcb56ef33f46ccdb27d5e02f8f5facdbf2fa0b9c6e6dd53a476e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:9ffa7e5a2ed3f92a6eb30792dc878add38b41f7ce5ca03a6f1a2c8b12300070a_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a6a946b8e424db855be70e94c1cab3e5dcf56be8b5caec8d48b3b4579310a25a_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:de70e3309c799110feacba1b6d64bf153818e21790500da6ea75c05f276bedcd_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f49b88b70726cb222fa43685d3a6704ccd8778a2a82b7c5c4aee4b47c54d3bcb_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:11caeb0f6c63f361d12e2c223aa0e1e363c79d8495a008f5b996184dfdd15d57_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:66b2f52b2abd9e3a1fcd1ef4aa926a0f8613730918a2b7743ce61d1ce9b103c7_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:deefcb8674d1899581331ba7899baedb7f9c5355b2b3e4f11b5414b1ae58a8be_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:f980269a8879cd0dced67eec6e2ec9f708b347e4d49981fafccc6c795f73e4cf_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01853cca36a1042f42860bb89048c4a09de76b2cfac412fd78e38fd74376ca39_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:4970ca74fcbc6aaf9f64812f37e31426444d041345541d498b12a819cbe29299_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:527395e13fedf00d5ffa4a2c70602cab213ff9c826940a529150d6b1df4f7395_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b3ca415e883c09cf8f42f2b1b63ddf007fae7ac183f2185201efecf48489636e_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-39821"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480756",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/767220",
          "url": "https://go.dev/cl/767220"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/78760",
          "url": "https://go.dev/issue/78760"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
          "url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5026",
          "url": "https://pkg.go.dev/vuln/GO-2026-5026"
        }
      ],
      "release_date": "2026-05-22T15:01:21.462000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-18T16:40:44+00:00",
          "details": "For OpenShift Container Platform 4.21 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/ocp-4-21-release-notes\n\nFor Red Hat OpenShift Logging 6.5, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.5",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:01271821684bdb4791a1e757092e3799247ac91519f8516599c7cf9080407076_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:958178be4fc3798cdd531660e14514c370ac334b8a27a31a8f08db3244f17341_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:b881afc31c6e287608699dfc9d38bf38ff3616b2b133cc4726f0060ce99b16de_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:c237813ec28c79232f1f8d5bb2f875157323d10ddceddf3f722cd885c3c5c4d5_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:56340"
        },
        {
          "category": "workaround",
          "details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:40c83c7127b6b90b9984b3c73b3cbad1c3a8f7af3dc792e5320d6defb9eb22e0_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5b4e3a421f13bd33d03185f4071b3e633767eb06a9875a02ca793d43fd1514c7_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:93e605c4231903b7a73e7578f8977a5c6029c767ab801f29b726d2e6ff290feb_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d9bc0d110bbc7b7ec8a2401f34cde12e470980086bb04fc532a9885917c06b7f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ee6505e36b31ecc38b080c2e56b7b26afd3c7db9b30d17947e6bcb6cf7f0e44e_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:01271821684bdb4791a1e757092e3799247ac91519f8516599c7cf9080407076_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:958178be4fc3798cdd531660e14514c370ac334b8a27a31a8f08db3244f17341_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:b881afc31c6e287608699dfc9d38bf38ff3616b2b133cc4726f0060ce99b16de_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:c237813ec28c79232f1f8d5bb2f875157323d10ddceddf3f722cd885c3c5c4d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:15b1be865c1d4df2fd1171acb46922ba864555b18dfc71febd372e11a5d0eb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:55c2e8cbb4c7e89ed719c136d401c1fa49198e4a98a2dfe78c5eacb5ee2cadc8_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8d334ebdf403e2a15a664c1960044c6852f3e00b55ce2f2e808f6213ae70e00f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ceb52082d9002ba1762e6653bc39b4253f05a7cd58a42c664c7a658e6133a7e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:17a67ac2934041f996b19574bbeffa9e56d8486969785ae219215384cfd4162f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:18ea59f76a1ddd747712fbb3314f55cfdefb4e12a39ad9f0d22c26d25e8b04b4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1c687dff9904d440a9efefc95bd82ac1cf10df5c030ee8a3164621bc84e447fc_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:fad58cb6ca31afd96f8ef741cad73c4328c24361dfad022848c227f129c5b4b5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:21c630e1de77a6e18b0b774ebfc5ccef2191fef60da0c7914d0a81d5be236ea3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:51538cb4de3a2767509d5a7869f9a63a054416e7163c38714bce9bd83da1b619_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:902fe34ead11574878df61323db6ac53f3ad55d13d40f72b8d514ea0356e1a81_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bff77adab78f874b962324a9674157383dfe4570309d24c7b2a6acebead62a39_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2a0befa5c4dbcb56ef33f46ccdb27d5e02f8f5facdbf2fa0b9c6e6dd53a476e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:9ffa7e5a2ed3f92a6eb30792dc878add38b41f7ce5ca03a6f1a2c8b12300070a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a6a946b8e424db855be70e94c1cab3e5dcf56be8b5caec8d48b3b4579310a25a_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:de70e3309c799110feacba1b6d64bf153818e21790500da6ea75c05f276bedcd_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f49b88b70726cb222fa43685d3a6704ccd8778a2a82b7c5c4aee4b47c54d3bcb_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:11caeb0f6c63f361d12e2c223aa0e1e363c79d8495a008f5b996184dfdd15d57_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:66b2f52b2abd9e3a1fcd1ef4aa926a0f8613730918a2b7743ce61d1ce9b103c7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:deefcb8674d1899581331ba7899baedb7f9c5355b2b3e4f11b5414b1ae58a8be_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:f980269a8879cd0dced67eec6e2ec9f708b347e4d49981fafccc6c795f73e4cf_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01853cca36a1042f42860bb89048c4a09de76b2cfac412fd78e38fd74376ca39_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:4970ca74fcbc6aaf9f64812f37e31426444d041345541d498b12a819cbe29299_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:527395e13fedf00d5ffa4a2c70602cab213ff9c826940a529150d6b1df4f7395_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b3ca415e883c09cf8f42f2b1b63ddf007fae7ac183f2185201efecf48489636e_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:40c83c7127b6b90b9984b3c73b3cbad1c3a8f7af3dc792e5320d6defb9eb22e0_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5b4e3a421f13bd33d03185f4071b3e633767eb06a9875a02ca793d43fd1514c7_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:93e605c4231903b7a73e7578f8977a5c6029c767ab801f29b726d2e6ff290feb_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d9bc0d110bbc7b7ec8a2401f34cde12e470980086bb04fc532a9885917c06b7f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ee6505e36b31ecc38b080c2e56b7b26afd3c7db9b30d17947e6bcb6cf7f0e44e_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:01271821684bdb4791a1e757092e3799247ac91519f8516599c7cf9080407076_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:958178be4fc3798cdd531660e14514c370ac334b8a27a31a8f08db3244f17341_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:b881afc31c6e287608699dfc9d38bf38ff3616b2b133cc4726f0060ce99b16de_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:c237813ec28c79232f1f8d5bb2f875157323d10ddceddf3f722cd885c3c5c4d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:15b1be865c1d4df2fd1171acb46922ba864555b18dfc71febd372e11a5d0eb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:55c2e8cbb4c7e89ed719c136d401c1fa49198e4a98a2dfe78c5eacb5ee2cadc8_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8d334ebdf403e2a15a664c1960044c6852f3e00b55ce2f2e808f6213ae70e00f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ceb52082d9002ba1762e6653bc39b4253f05a7cd58a42c664c7a658e6133a7e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:17a67ac2934041f996b19574bbeffa9e56d8486969785ae219215384cfd4162f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:18ea59f76a1ddd747712fbb3314f55cfdefb4e12a39ad9f0d22c26d25e8b04b4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1c687dff9904d440a9efefc95bd82ac1cf10df5c030ee8a3164621bc84e447fc_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:fad58cb6ca31afd96f8ef741cad73c4328c24361dfad022848c227f129c5b4b5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:21c630e1de77a6e18b0b774ebfc5ccef2191fef60da0c7914d0a81d5be236ea3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:51538cb4de3a2767509d5a7869f9a63a054416e7163c38714bce9bd83da1b619_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:902fe34ead11574878df61323db6ac53f3ad55d13d40f72b8d514ea0356e1a81_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bff77adab78f874b962324a9674157383dfe4570309d24c7b2a6acebead62a39_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2a0befa5c4dbcb56ef33f46ccdb27d5e02f8f5facdbf2fa0b9c6e6dd53a476e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:9ffa7e5a2ed3f92a6eb30792dc878add38b41f7ce5ca03a6f1a2c8b12300070a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a6a946b8e424db855be70e94c1cab3e5dcf56be8b5caec8d48b3b4579310a25a_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:de70e3309c799110feacba1b6d64bf153818e21790500da6ea75c05f276bedcd_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f49b88b70726cb222fa43685d3a6704ccd8778a2a82b7c5c4aee4b47c54d3bcb_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:11caeb0f6c63f361d12e2c223aa0e1e363c79d8495a008f5b996184dfdd15d57_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:66b2f52b2abd9e3a1fcd1ef4aa926a0f8613730918a2b7743ce61d1ce9b103c7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:deefcb8674d1899581331ba7899baedb7f9c5355b2b3e4f11b5414b1ae58a8be_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:f980269a8879cd0dced67eec6e2ec9f708b347e4d49981fafccc6c795f73e4cf_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01853cca36a1042f42860bb89048c4a09de76b2cfac412fd78e38fd74376ca39_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:4970ca74fcbc6aaf9f64812f37e31426444d041345541d498b12a819cbe29299_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:527395e13fedf00d5ffa4a2c70602cab213ff9c826940a529150d6b1df4f7395_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b3ca415e883c09cf8f42f2b1b63ddf007fae7ac183f2185201efecf48489636e_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
    },
    {
      "cve": "CVE-2026-42151",
      "cwe": {
        "id": "CWE-256",
        "name": "Plaintext Storage of a Password"
      },
      "discovery_date": "2026-05-04T19:02:26.983660+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:40c83c7127b6b90b9984b3c73b3cbad1c3a8f7af3dc792e5320d6defb9eb22e0_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5b4e3a421f13bd33d03185f4071b3e633767eb06a9875a02ca793d43fd1514c7_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:93e605c4231903b7a73e7578f8977a5c6029c767ab801f29b726d2e6ff290feb_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d9bc0d110bbc7b7ec8a2401f34cde12e470980086bb04fc532a9885917c06b7f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ee6505e36b31ecc38b080c2e56b7b26afd3c7db9b30d17947e6bcb6cf7f0e44e_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:01271821684bdb4791a1e757092e3799247ac91519f8516599c7cf9080407076_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:958178be4fc3798cdd531660e14514c370ac334b8a27a31a8f08db3244f17341_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:b881afc31c6e287608699dfc9d38bf38ff3616b2b133cc4726f0060ce99b16de_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:c237813ec28c79232f1f8d5bb2f875157323d10ddceddf3f722cd885c3c5c4d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:15b1be865c1d4df2fd1171acb46922ba864555b18dfc71febd372e11a5d0eb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:55c2e8cbb4c7e89ed719c136d401c1fa49198e4a98a2dfe78c5eacb5ee2cadc8_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8d334ebdf403e2a15a664c1960044c6852f3e00b55ce2f2e808f6213ae70e00f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ceb52082d9002ba1762e6653bc39b4253f05a7cd58a42c664c7a658e6133a7e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:17a67ac2934041f996b19574bbeffa9e56d8486969785ae219215384cfd4162f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:18ea59f76a1ddd747712fbb3314f55cfdefb4e12a39ad9f0d22c26d25e8b04b4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1c687dff9904d440a9efefc95bd82ac1cf10df5c030ee8a3164621bc84e447fc_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:fad58cb6ca31afd96f8ef741cad73c4328c24361dfad022848c227f129c5b4b5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:21c630e1de77a6e18b0b774ebfc5ccef2191fef60da0c7914d0a81d5be236ea3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01853cca36a1042f42860bb89048c4a09de76b2cfac412fd78e38fd74376ca39_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:4970ca74fcbc6aaf9f64812f37e31426444d041345541d498b12a819cbe29299_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:527395e13fedf00d5ffa4a2c70602cab213ff9c826940a529150d6b1df4f7395_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b3ca415e883c09cf8f42f2b1b63ddf007fae7ac183f2185201efecf48489636e_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2466507"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important information disclosure flaw in Prometheus affects instances configured to use Azure AD remote write with OAuth authentication. The client secret, intended to be a secure credential, is exposed in plaintext through the `/-/config` HTTP API endpoint. This could allow an attacker with access to this endpoint to retrieve the secret, potentially compromising integrated Azure AD services.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:51538cb4de3a2767509d5a7869f9a63a054416e7163c38714bce9bd83da1b619_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:902fe34ead11574878df61323db6ac53f3ad55d13d40f72b8d514ea0356e1a81_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bff77adab78f874b962324a9674157383dfe4570309d24c7b2a6acebead62a39_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2a0befa5c4dbcb56ef33f46ccdb27d5e02f8f5facdbf2fa0b9c6e6dd53a476e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:9ffa7e5a2ed3f92a6eb30792dc878add38b41f7ce5ca03a6f1a2c8b12300070a_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a6a946b8e424db855be70e94c1cab3e5dcf56be8b5caec8d48b3b4579310a25a_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:de70e3309c799110feacba1b6d64bf153818e21790500da6ea75c05f276bedcd_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f49b88b70726cb222fa43685d3a6704ccd8778a2a82b7c5c4aee4b47c54d3bcb_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:11caeb0f6c63f361d12e2c223aa0e1e363c79d8495a008f5b996184dfdd15d57_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:66b2f52b2abd9e3a1fcd1ef4aa926a0f8613730918a2b7743ce61d1ce9b103c7_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:deefcb8674d1899581331ba7899baedb7f9c5355b2b3e4f11b5414b1ae58a8be_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:f980269a8879cd0dced67eec6e2ec9f708b347e4d49981fafccc6c795f73e4cf_s390x"
        ],
        "known_not_affected": [
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:40c83c7127b6b90b9984b3c73b3cbad1c3a8f7af3dc792e5320d6defb9eb22e0_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5b4e3a421f13bd33d03185f4071b3e633767eb06a9875a02ca793d43fd1514c7_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:93e605c4231903b7a73e7578f8977a5c6029c767ab801f29b726d2e6ff290feb_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d9bc0d110bbc7b7ec8a2401f34cde12e470980086bb04fc532a9885917c06b7f_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ee6505e36b31ecc38b080c2e56b7b26afd3c7db9b30d17947e6bcb6cf7f0e44e_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:01271821684bdb4791a1e757092e3799247ac91519f8516599c7cf9080407076_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:958178be4fc3798cdd531660e14514c370ac334b8a27a31a8f08db3244f17341_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:b881afc31c6e287608699dfc9d38bf38ff3616b2b133cc4726f0060ce99b16de_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:c237813ec28c79232f1f8d5bb2f875157323d10ddceddf3f722cd885c3c5c4d5_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:15b1be865c1d4df2fd1171acb46922ba864555b18dfc71febd372e11a5d0eb8e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:55c2e8cbb4c7e89ed719c136d401c1fa49198e4a98a2dfe78c5eacb5ee2cadc8_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8d334ebdf403e2a15a664c1960044c6852f3e00b55ce2f2e808f6213ae70e00f_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ceb52082d9002ba1762e6653bc39b4253f05a7cd58a42c664c7a658e6133a7e8_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:17a67ac2934041f996b19574bbeffa9e56d8486969785ae219215384cfd4162f_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:18ea59f76a1ddd747712fbb3314f55cfdefb4e12a39ad9f0d22c26d25e8b04b4_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1c687dff9904d440a9efefc95bd82ac1cf10df5c030ee8a3164621bc84e447fc_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:fad58cb6ca31afd96f8ef741cad73c4328c24361dfad022848c227f129c5b4b5_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:21c630e1de77a6e18b0b774ebfc5ccef2191fef60da0c7914d0a81d5be236ea3_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01853cca36a1042f42860bb89048c4a09de76b2cfac412fd78e38fd74376ca39_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:4970ca74fcbc6aaf9f64812f37e31426444d041345541d498b12a819cbe29299_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:527395e13fedf00d5ffa4a2c70602cab213ff9c826940a529150d6b1df4f7395_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b3ca415e883c09cf8f42f2b1b63ddf007fae7ac183f2185201efecf48489636e_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-42151"
        },
        {
          "category": "external",
          "summary": "RHBZ#2466507",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-42151",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-42151"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151"
        },
        {
          "category": "external",
          "summary": "https://github.com/prometheus/prometheus/pull/18587",
          "url": "https://github.com/prometheus/prometheus/pull/18587"
        },
        {
          "category": "external",
          "summary": "https://github.com/prometheus/prometheus/pull/18590",
          "url": "https://github.com/prometheus/prometheus/pull/18590"
        },
        {
          "category": "external",
          "summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
          "url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
        },
        {
          "category": "external",
          "summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
          "url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
        },
        {
          "category": "external",
          "summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj",
          "url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj"
        }
      ],
      "release_date": "2026-05-04T18:12:16.917000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-18T16:40:44+00:00",
          "details": "For OpenShift Container Platform 4.21 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/ocp-4-21-release-notes\n\nFor Red Hat OpenShift Logging 6.5, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.5",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:51538cb4de3a2767509d5a7869f9a63a054416e7163c38714bce9bd83da1b619_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:902fe34ead11574878df61323db6ac53f3ad55d13d40f72b8d514ea0356e1a81_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bff77adab78f874b962324a9674157383dfe4570309d24c7b2a6acebead62a39_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2a0befa5c4dbcb56ef33f46ccdb27d5e02f8f5facdbf2fa0b9c6e6dd53a476e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:9ffa7e5a2ed3f92a6eb30792dc878add38b41f7ce5ca03a6f1a2c8b12300070a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a6a946b8e424db855be70e94c1cab3e5dcf56be8b5caec8d48b3b4579310a25a_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:de70e3309c799110feacba1b6d64bf153818e21790500da6ea75c05f276bedcd_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f49b88b70726cb222fa43685d3a6704ccd8778a2a82b7c5c4aee4b47c54d3bcb_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:11caeb0f6c63f361d12e2c223aa0e1e363c79d8495a008f5b996184dfdd15d57_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:66b2f52b2abd9e3a1fcd1ef4aa926a0f8613730918a2b7743ce61d1ce9b103c7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:deefcb8674d1899581331ba7899baedb7f9c5355b2b3e4f11b5414b1ae58a8be_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:f980269a8879cd0dced67eec6e2ec9f708b347e4d49981fafccc6c795f73e4cf_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:56340"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:40c83c7127b6b90b9984b3c73b3cbad1c3a8f7af3dc792e5320d6defb9eb22e0_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5b4e3a421f13bd33d03185f4071b3e633767eb06a9875a02ca793d43fd1514c7_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:93e605c4231903b7a73e7578f8977a5c6029c767ab801f29b726d2e6ff290feb_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d9bc0d110bbc7b7ec8a2401f34cde12e470980086bb04fc532a9885917c06b7f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ee6505e36b31ecc38b080c2e56b7b26afd3c7db9b30d17947e6bcb6cf7f0e44e_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:01271821684bdb4791a1e757092e3799247ac91519f8516599c7cf9080407076_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:958178be4fc3798cdd531660e14514c370ac334b8a27a31a8f08db3244f17341_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:b881afc31c6e287608699dfc9d38bf38ff3616b2b133cc4726f0060ce99b16de_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:c237813ec28c79232f1f8d5bb2f875157323d10ddceddf3f722cd885c3c5c4d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:15b1be865c1d4df2fd1171acb46922ba864555b18dfc71febd372e11a5d0eb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:55c2e8cbb4c7e89ed719c136d401c1fa49198e4a98a2dfe78c5eacb5ee2cadc8_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8d334ebdf403e2a15a664c1960044c6852f3e00b55ce2f2e808f6213ae70e00f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ceb52082d9002ba1762e6653bc39b4253f05a7cd58a42c664c7a658e6133a7e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:17a67ac2934041f996b19574bbeffa9e56d8486969785ae219215384cfd4162f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:18ea59f76a1ddd747712fbb3314f55cfdefb4e12a39ad9f0d22c26d25e8b04b4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1c687dff9904d440a9efefc95bd82ac1cf10df5c030ee8a3164621bc84e447fc_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:fad58cb6ca31afd96f8ef741cad73c4328c24361dfad022848c227f129c5b4b5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:21c630e1de77a6e18b0b774ebfc5ccef2191fef60da0c7914d0a81d5be236ea3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:51538cb4de3a2767509d5a7869f9a63a054416e7163c38714bce9bd83da1b619_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:902fe34ead11574878df61323db6ac53f3ad55d13d40f72b8d514ea0356e1a81_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bff77adab78f874b962324a9674157383dfe4570309d24c7b2a6acebead62a39_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2a0befa5c4dbcb56ef33f46ccdb27d5e02f8f5facdbf2fa0b9c6e6dd53a476e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:9ffa7e5a2ed3f92a6eb30792dc878add38b41f7ce5ca03a6f1a2c8b12300070a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a6a946b8e424db855be70e94c1cab3e5dcf56be8b5caec8d48b3b4579310a25a_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:de70e3309c799110feacba1b6d64bf153818e21790500da6ea75c05f276bedcd_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f49b88b70726cb222fa43685d3a6704ccd8778a2a82b7c5c4aee4b47c54d3bcb_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:11caeb0f6c63f361d12e2c223aa0e1e363c79d8495a008f5b996184dfdd15d57_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:66b2f52b2abd9e3a1fcd1ef4aa926a0f8613730918a2b7743ce61d1ce9b103c7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:deefcb8674d1899581331ba7899baedb7f9c5355b2b3e4f11b5414b1ae58a8be_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:f980269a8879cd0dced67eec6e2ec9f708b347e4d49981fafccc6c795f73e4cf_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01853cca36a1042f42860bb89048c4a09de76b2cfac412fd78e38fd74376ca39_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:4970ca74fcbc6aaf9f64812f37e31426444d041345541d498b12a819cbe29299_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:527395e13fedf00d5ffa4a2c70602cab213ff9c826940a529150d6b1df4f7395_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b3ca415e883c09cf8f42f2b1b63ddf007fae7ac183f2185201efecf48489636e_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API"
    },
    {
      "cve": "CVE-2026-42154",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-05-04T19:02:19.626646+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:40c83c7127b6b90b9984b3c73b3cbad1c3a8f7af3dc792e5320d6defb9eb22e0_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5b4e3a421f13bd33d03185f4071b3e633767eb06a9875a02ca793d43fd1514c7_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:93e605c4231903b7a73e7578f8977a5c6029c767ab801f29b726d2e6ff290feb_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d9bc0d110bbc7b7ec8a2401f34cde12e470980086bb04fc532a9885917c06b7f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ee6505e36b31ecc38b080c2e56b7b26afd3c7db9b30d17947e6bcb6cf7f0e44e_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:01271821684bdb4791a1e757092e3799247ac91519f8516599c7cf9080407076_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:958178be4fc3798cdd531660e14514c370ac334b8a27a31a8f08db3244f17341_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:b881afc31c6e287608699dfc9d38bf38ff3616b2b133cc4726f0060ce99b16de_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:c237813ec28c79232f1f8d5bb2f875157323d10ddceddf3f722cd885c3c5c4d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:15b1be865c1d4df2fd1171acb46922ba864555b18dfc71febd372e11a5d0eb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:55c2e8cbb4c7e89ed719c136d401c1fa49198e4a98a2dfe78c5eacb5ee2cadc8_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8d334ebdf403e2a15a664c1960044c6852f3e00b55ce2f2e808f6213ae70e00f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ceb52082d9002ba1762e6653bc39b4253f05a7cd58a42c664c7a658e6133a7e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:17a67ac2934041f996b19574bbeffa9e56d8486969785ae219215384cfd4162f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:18ea59f76a1ddd747712fbb3314f55cfdefb4e12a39ad9f0d22c26d25e8b04b4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1c687dff9904d440a9efefc95bd82ac1cf10df5c030ee8a3164621bc84e447fc_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:fad58cb6ca31afd96f8ef741cad73c4328c24361dfad022848c227f129c5b4b5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:21c630e1de77a6e18b0b774ebfc5ccef2191fef60da0c7914d0a81d5be236ea3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01853cca36a1042f42860bb89048c4a09de76b2cfac412fd78e38fd74376ca39_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:4970ca74fcbc6aaf9f64812f37e31426444d041345541d498b12a819cbe29299_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:527395e13fedf00d5ffa4a2c70602cab213ff9c826940a529150d6b1df4f7395_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b3ca415e883c09cf8f42f2b1b63ddf007fae7ac183f2185201efecf48489636e_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2466505"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in Prometheus, allowing an unauthenticated remote attacker to crash the Prometheus process. This could lead to service unavailability in Red Hat products that deploy Prometheus for monitoring, as the remote read endpoint does not properly validate snappy-compressed request lengths.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:51538cb4de3a2767509d5a7869f9a63a054416e7163c38714bce9bd83da1b619_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:902fe34ead11574878df61323db6ac53f3ad55d13d40f72b8d514ea0356e1a81_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bff77adab78f874b962324a9674157383dfe4570309d24c7b2a6acebead62a39_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2a0befa5c4dbcb56ef33f46ccdb27d5e02f8f5facdbf2fa0b9c6e6dd53a476e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:9ffa7e5a2ed3f92a6eb30792dc878add38b41f7ce5ca03a6f1a2c8b12300070a_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a6a946b8e424db855be70e94c1cab3e5dcf56be8b5caec8d48b3b4579310a25a_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:de70e3309c799110feacba1b6d64bf153818e21790500da6ea75c05f276bedcd_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f49b88b70726cb222fa43685d3a6704ccd8778a2a82b7c5c4aee4b47c54d3bcb_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:11caeb0f6c63f361d12e2c223aa0e1e363c79d8495a008f5b996184dfdd15d57_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:66b2f52b2abd9e3a1fcd1ef4aa926a0f8613730918a2b7743ce61d1ce9b103c7_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:deefcb8674d1899581331ba7899baedb7f9c5355b2b3e4f11b5414b1ae58a8be_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:f980269a8879cd0dced67eec6e2ec9f708b347e4d49981fafccc6c795f73e4cf_s390x"
        ],
        "known_not_affected": [
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:40c83c7127b6b90b9984b3c73b3cbad1c3a8f7af3dc792e5320d6defb9eb22e0_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5b4e3a421f13bd33d03185f4071b3e633767eb06a9875a02ca793d43fd1514c7_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:93e605c4231903b7a73e7578f8977a5c6029c767ab801f29b726d2e6ff290feb_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d9bc0d110bbc7b7ec8a2401f34cde12e470980086bb04fc532a9885917c06b7f_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ee6505e36b31ecc38b080c2e56b7b26afd3c7db9b30d17947e6bcb6cf7f0e44e_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:01271821684bdb4791a1e757092e3799247ac91519f8516599c7cf9080407076_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:958178be4fc3798cdd531660e14514c370ac334b8a27a31a8f08db3244f17341_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:b881afc31c6e287608699dfc9d38bf38ff3616b2b133cc4726f0060ce99b16de_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:c237813ec28c79232f1f8d5bb2f875157323d10ddceddf3f722cd885c3c5c4d5_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:15b1be865c1d4df2fd1171acb46922ba864555b18dfc71febd372e11a5d0eb8e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:55c2e8cbb4c7e89ed719c136d401c1fa49198e4a98a2dfe78c5eacb5ee2cadc8_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8d334ebdf403e2a15a664c1960044c6852f3e00b55ce2f2e808f6213ae70e00f_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ceb52082d9002ba1762e6653bc39b4253f05a7cd58a42c664c7a658e6133a7e8_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:17a67ac2934041f996b19574bbeffa9e56d8486969785ae219215384cfd4162f_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:18ea59f76a1ddd747712fbb3314f55cfdefb4e12a39ad9f0d22c26d25e8b04b4_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1c687dff9904d440a9efefc95bd82ac1cf10df5c030ee8a3164621bc84e447fc_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:fad58cb6ca31afd96f8ef741cad73c4328c24361dfad022848c227f129c5b4b5_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:21c630e1de77a6e18b0b774ebfc5ccef2191fef60da0c7914d0a81d5be236ea3_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01853cca36a1042f42860bb89048c4a09de76b2cfac412fd78e38fd74376ca39_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:4970ca74fcbc6aaf9f64812f37e31426444d041345541d498b12a819cbe29299_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:527395e13fedf00d5ffa4a2c70602cab213ff9c826940a529150d6b1df4f7395_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b3ca415e883c09cf8f42f2b1b63ddf007fae7ac183f2185201efecf48489636e_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-42154"
        },
        {
          "category": "external",
          "summary": "RHBZ#2466505",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466505"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-42154",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-42154"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154"
        },
        {
          "category": "external",
          "summary": "https://github.com/prometheus/prometheus/pull/18584",
          "url": "https://github.com/prometheus/prometheus/pull/18584"
        },
        {
          "category": "external",
          "summary": "https://github.com/prometheus/prometheus/pull/18585",
          "url": "https://github.com/prometheus/prometheus/pull/18585"
        },
        {
          "category": "external",
          "summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
          "url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
        },
        {
          "category": "external",
          "summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
          "url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
        },
        {
          "category": "external",
          "summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm",
          "url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm"
        }
      ],
      "release_date": "2026-05-04T18:13:12.340000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-18T16:40:44+00:00",
          "details": "For OpenShift Container Platform 4.21 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/ocp-4-21-release-notes\n\nFor Red Hat OpenShift Logging 6.5, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.5",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:51538cb4de3a2767509d5a7869f9a63a054416e7163c38714bce9bd83da1b619_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:902fe34ead11574878df61323db6ac53f3ad55d13d40f72b8d514ea0356e1a81_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bff77adab78f874b962324a9674157383dfe4570309d24c7b2a6acebead62a39_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2a0befa5c4dbcb56ef33f46ccdb27d5e02f8f5facdbf2fa0b9c6e6dd53a476e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:9ffa7e5a2ed3f92a6eb30792dc878add38b41f7ce5ca03a6f1a2c8b12300070a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a6a946b8e424db855be70e94c1cab3e5dcf56be8b5caec8d48b3b4579310a25a_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:de70e3309c799110feacba1b6d64bf153818e21790500da6ea75c05f276bedcd_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f49b88b70726cb222fa43685d3a6704ccd8778a2a82b7c5c4aee4b47c54d3bcb_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:11caeb0f6c63f361d12e2c223aa0e1e363c79d8495a008f5b996184dfdd15d57_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:66b2f52b2abd9e3a1fcd1ef4aa926a0f8613730918a2b7743ce61d1ce9b103c7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:deefcb8674d1899581331ba7899baedb7f9c5355b2b3e4f11b5414b1ae58a8be_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:f980269a8879cd0dced67eec6e2ec9f708b347e4d49981fafccc6c795f73e4cf_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:56340"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, restrict network access to the Prometheus remote read endpoint (/api/v1/read). Configure firewall rules or network policies to permit connections only from trusted internal networks or authorized clients. This action reduces the attack surface by limiting exposure to unauthenticated remote attackers. A service restart or reload may be required for the changes to take effect.",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:40c83c7127b6b90b9984b3c73b3cbad1c3a8f7af3dc792e5320d6defb9eb22e0_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5b4e3a421f13bd33d03185f4071b3e633767eb06a9875a02ca793d43fd1514c7_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:93e605c4231903b7a73e7578f8977a5c6029c767ab801f29b726d2e6ff290feb_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d9bc0d110bbc7b7ec8a2401f34cde12e470980086bb04fc532a9885917c06b7f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ee6505e36b31ecc38b080c2e56b7b26afd3c7db9b30d17947e6bcb6cf7f0e44e_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:01271821684bdb4791a1e757092e3799247ac91519f8516599c7cf9080407076_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:958178be4fc3798cdd531660e14514c370ac334b8a27a31a8f08db3244f17341_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:b881afc31c6e287608699dfc9d38bf38ff3616b2b133cc4726f0060ce99b16de_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:c237813ec28c79232f1f8d5bb2f875157323d10ddceddf3f722cd885c3c5c4d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:15b1be865c1d4df2fd1171acb46922ba864555b18dfc71febd372e11a5d0eb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:55c2e8cbb4c7e89ed719c136d401c1fa49198e4a98a2dfe78c5eacb5ee2cadc8_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8d334ebdf403e2a15a664c1960044c6852f3e00b55ce2f2e808f6213ae70e00f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ceb52082d9002ba1762e6653bc39b4253f05a7cd58a42c664c7a658e6133a7e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:17a67ac2934041f996b19574bbeffa9e56d8486969785ae219215384cfd4162f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:18ea59f76a1ddd747712fbb3314f55cfdefb4e12a39ad9f0d22c26d25e8b04b4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1c687dff9904d440a9efefc95bd82ac1cf10df5c030ee8a3164621bc84e447fc_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:fad58cb6ca31afd96f8ef741cad73c4328c24361dfad022848c227f129c5b4b5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:21c630e1de77a6e18b0b774ebfc5ccef2191fef60da0c7914d0a81d5be236ea3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:51538cb4de3a2767509d5a7869f9a63a054416e7163c38714bce9bd83da1b619_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:902fe34ead11574878df61323db6ac53f3ad55d13d40f72b8d514ea0356e1a81_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bff77adab78f874b962324a9674157383dfe4570309d24c7b2a6acebead62a39_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2a0befa5c4dbcb56ef33f46ccdb27d5e02f8f5facdbf2fa0b9c6e6dd53a476e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:9ffa7e5a2ed3f92a6eb30792dc878add38b41f7ce5ca03a6f1a2c8b12300070a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a6a946b8e424db855be70e94c1cab3e5dcf56be8b5caec8d48b3b4579310a25a_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:de70e3309c799110feacba1b6d64bf153818e21790500da6ea75c05f276bedcd_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f49b88b70726cb222fa43685d3a6704ccd8778a2a82b7c5c4aee4b47c54d3bcb_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:11caeb0f6c63f361d12e2c223aa0e1e363c79d8495a008f5b996184dfdd15d57_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:66b2f52b2abd9e3a1fcd1ef4aa926a0f8613730918a2b7743ce61d1ce9b103c7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:deefcb8674d1899581331ba7899baedb7f9c5355b2b3e4f11b5414b1ae58a8be_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:f980269a8879cd0dced67eec6e2ec9f708b347e4d49981fafccc6c795f73e4cf_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01853cca36a1042f42860bb89048c4a09de76b2cfac412fd78e38fd74376ca39_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:4970ca74fcbc6aaf9f64812f37e31426444d041345541d498b12a819cbe29299_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:527395e13fedf00d5ffa4a2c70602cab213ff9c826940a529150d6b1df4f7395_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b3ca415e883c09cf8f42f2b1b63ddf007fae7ac183f2185201efecf48489636e_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:40c83c7127b6b90b9984b3c73b3cbad1c3a8f7af3dc792e5320d6defb9eb22e0_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5b4e3a421f13bd33d03185f4071b3e633767eb06a9875a02ca793d43fd1514c7_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:93e605c4231903b7a73e7578f8977a5c6029c767ab801f29b726d2e6ff290feb_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d9bc0d110bbc7b7ec8a2401f34cde12e470980086bb04fc532a9885917c06b7f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ee6505e36b31ecc38b080c2e56b7b26afd3c7db9b30d17947e6bcb6cf7f0e44e_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:01271821684bdb4791a1e757092e3799247ac91519f8516599c7cf9080407076_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:958178be4fc3798cdd531660e14514c370ac334b8a27a31a8f08db3244f17341_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:b881afc31c6e287608699dfc9d38bf38ff3616b2b133cc4726f0060ce99b16de_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:c237813ec28c79232f1f8d5bb2f875157323d10ddceddf3f722cd885c3c5c4d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:15b1be865c1d4df2fd1171acb46922ba864555b18dfc71febd372e11a5d0eb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:55c2e8cbb4c7e89ed719c136d401c1fa49198e4a98a2dfe78c5eacb5ee2cadc8_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8d334ebdf403e2a15a664c1960044c6852f3e00b55ce2f2e808f6213ae70e00f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ceb52082d9002ba1762e6653bc39b4253f05a7cd58a42c664c7a658e6133a7e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:17a67ac2934041f996b19574bbeffa9e56d8486969785ae219215384cfd4162f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:18ea59f76a1ddd747712fbb3314f55cfdefb4e12a39ad9f0d22c26d25e8b04b4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1c687dff9904d440a9efefc95bd82ac1cf10df5c030ee8a3164621bc84e447fc_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:fad58cb6ca31afd96f8ef741cad73c4328c24361dfad022848c227f129c5b4b5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:21c630e1de77a6e18b0b774ebfc5ccef2191fef60da0c7914d0a81d5be236ea3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:51538cb4de3a2767509d5a7869f9a63a054416e7163c38714bce9bd83da1b619_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:902fe34ead11574878df61323db6ac53f3ad55d13d40f72b8d514ea0356e1a81_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bff77adab78f874b962324a9674157383dfe4570309d24c7b2a6acebead62a39_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2a0befa5c4dbcb56ef33f46ccdb27d5e02f8f5facdbf2fa0b9c6e6dd53a476e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:9ffa7e5a2ed3f92a6eb30792dc878add38b41f7ce5ca03a6f1a2c8b12300070a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a6a946b8e424db855be70e94c1cab3e5dcf56be8b5caec8d48b3b4579310a25a_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:de70e3309c799110feacba1b6d64bf153818e21790500da6ea75c05f276bedcd_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f49b88b70726cb222fa43685d3a6704ccd8778a2a82b7c5c4aee4b47c54d3bcb_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:11caeb0f6c63f361d12e2c223aa0e1e363c79d8495a008f5b996184dfdd15d57_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:66b2f52b2abd9e3a1fcd1ef4aa926a0f8613730918a2b7743ce61d1ce9b103c7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:deefcb8674d1899581331ba7899baedb7f9c5355b2b3e4f11b5414b1ae58a8be_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:f980269a8879cd0dced67eec6e2ec9f708b347e4d49981fafccc6c795f73e4cf_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01853cca36a1042f42860bb89048c4a09de76b2cfac412fd78e38fd74376ca39_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:4970ca74fcbc6aaf9f64812f37e31426444d041345541d498b12a819cbe29299_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:527395e13fedf00d5ffa4a2c70602cab213ff9c826940a529150d6b1df4f7395_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b3ca415e883c09cf8f42f2b1b63ddf007fae7ac183f2185201efecf48489636e_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint"
    },
    {
      "cve": "CVE-2026-42499",
      "cwe": {
        "id": "CWE-1046",
        "name": "Creation of Immutable Text Using String Concatenation"
      },
      "discovery_date": "2026-05-07T20:00:51.685602+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:40c83c7127b6b90b9984b3c73b3cbad1c3a8f7af3dc792e5320d6defb9eb22e0_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5b4e3a421f13bd33d03185f4071b3e633767eb06a9875a02ca793d43fd1514c7_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:93e605c4231903b7a73e7578f8977a5c6029c767ab801f29b726d2e6ff290feb_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d9bc0d110bbc7b7ec8a2401f34cde12e470980086bb04fc532a9885917c06b7f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ee6505e36b31ecc38b080c2e56b7b26afd3c7db9b30d17947e6bcb6cf7f0e44e_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:01271821684bdb4791a1e757092e3799247ac91519f8516599c7cf9080407076_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:958178be4fc3798cdd531660e14514c370ac334b8a27a31a8f08db3244f17341_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:b881afc31c6e287608699dfc9d38bf38ff3616b2b133cc4726f0060ce99b16de_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:c237813ec28c79232f1f8d5bb2f875157323d10ddceddf3f722cd885c3c5c4d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:15b1be865c1d4df2fd1171acb46922ba864555b18dfc71febd372e11a5d0eb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:55c2e8cbb4c7e89ed719c136d401c1fa49198e4a98a2dfe78c5eacb5ee2cadc8_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8d334ebdf403e2a15a664c1960044c6852f3e00b55ce2f2e808f6213ae70e00f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ceb52082d9002ba1762e6653bc39b4253f05a7cd58a42c664c7a658e6133a7e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:21c630e1de77a6e18b0b774ebfc5ccef2191fef60da0c7914d0a81d5be236ea3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:51538cb4de3a2767509d5a7869f9a63a054416e7163c38714bce9bd83da1b619_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:902fe34ead11574878df61323db6ac53f3ad55d13d40f72b8d514ea0356e1a81_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bff77adab78f874b962324a9674157383dfe4570309d24c7b2a6acebead62a39_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2a0befa5c4dbcb56ef33f46ccdb27d5e02f8f5facdbf2fa0b9c6e6dd53a476e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:9ffa7e5a2ed3f92a6eb30792dc878add38b41f7ce5ca03a6f1a2c8b12300070a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a6a946b8e424db855be70e94c1cab3e5dcf56be8b5caec8d48b3b4579310a25a_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:de70e3309c799110feacba1b6d64bf153818e21790500da6ea75c05f276bedcd_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f49b88b70726cb222fa43685d3a6704ccd8778a2a82b7c5c4aee4b47c54d3bcb_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:11caeb0f6c63f361d12e2c223aa0e1e363c79d8495a008f5b996184dfdd15d57_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:66b2f52b2abd9e3a1fcd1ef4aa926a0f8613730918a2b7743ce61d1ce9b103c7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:deefcb8674d1899581331ba7899baedb7f9c5355b2b3e4f11b5414b1ae58a8be_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:f980269a8879cd0dced67eec6e2ec9f708b347e4d49981fafccc6c795f73e4cf_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01853cca36a1042f42860bb89048c4a09de76b2cfac412fd78e38fd74376ca39_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:4970ca74fcbc6aaf9f64812f37e31426444d041345541d498b12a819cbe29299_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:527395e13fedf00d5ffa4a2c70602cab213ff9c826940a529150d6b1df4f7395_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b3ca415e883c09cf8f42f2b1b63ddf007fae7ac183f2185201efecf48489636e_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2467809"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:17a67ac2934041f996b19574bbeffa9e56d8486969785ae219215384cfd4162f_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:18ea59f76a1ddd747712fbb3314f55cfdefb4e12a39ad9f0d22c26d25e8b04b4_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1c687dff9904d440a9efefc95bd82ac1cf10df5c030ee8a3164621bc84e447fc_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:fad58cb6ca31afd96f8ef741cad73c4328c24361dfad022848c227f129c5b4b5_ppc64le"
        ],
        "known_not_affected": [
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:40c83c7127b6b90b9984b3c73b3cbad1c3a8f7af3dc792e5320d6defb9eb22e0_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5b4e3a421f13bd33d03185f4071b3e633767eb06a9875a02ca793d43fd1514c7_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:93e605c4231903b7a73e7578f8977a5c6029c767ab801f29b726d2e6ff290feb_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d9bc0d110bbc7b7ec8a2401f34cde12e470980086bb04fc532a9885917c06b7f_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ee6505e36b31ecc38b080c2e56b7b26afd3c7db9b30d17947e6bcb6cf7f0e44e_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:01271821684bdb4791a1e757092e3799247ac91519f8516599c7cf9080407076_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:958178be4fc3798cdd531660e14514c370ac334b8a27a31a8f08db3244f17341_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:b881afc31c6e287608699dfc9d38bf38ff3616b2b133cc4726f0060ce99b16de_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:c237813ec28c79232f1f8d5bb2f875157323d10ddceddf3f722cd885c3c5c4d5_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:15b1be865c1d4df2fd1171acb46922ba864555b18dfc71febd372e11a5d0eb8e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:55c2e8cbb4c7e89ed719c136d401c1fa49198e4a98a2dfe78c5eacb5ee2cadc8_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8d334ebdf403e2a15a664c1960044c6852f3e00b55ce2f2e808f6213ae70e00f_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ceb52082d9002ba1762e6653bc39b4253f05a7cd58a42c664c7a658e6133a7e8_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:21c630e1de77a6e18b0b774ebfc5ccef2191fef60da0c7914d0a81d5be236ea3_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:51538cb4de3a2767509d5a7869f9a63a054416e7163c38714bce9bd83da1b619_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:902fe34ead11574878df61323db6ac53f3ad55d13d40f72b8d514ea0356e1a81_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bff77adab78f874b962324a9674157383dfe4570309d24c7b2a6acebead62a39_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2a0befa5c4dbcb56ef33f46ccdb27d5e02f8f5facdbf2fa0b9c6e6dd53a476e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:9ffa7e5a2ed3f92a6eb30792dc878add38b41f7ce5ca03a6f1a2c8b12300070a_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a6a946b8e424db855be70e94c1cab3e5dcf56be8b5caec8d48b3b4579310a25a_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:de70e3309c799110feacba1b6d64bf153818e21790500da6ea75c05f276bedcd_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f49b88b70726cb222fa43685d3a6704ccd8778a2a82b7c5c4aee4b47c54d3bcb_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:11caeb0f6c63f361d12e2c223aa0e1e363c79d8495a008f5b996184dfdd15d57_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:66b2f52b2abd9e3a1fcd1ef4aa926a0f8613730918a2b7743ce61d1ce9b103c7_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:deefcb8674d1899581331ba7899baedb7f9c5355b2b3e4f11b5414b1ae58a8be_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:f980269a8879cd0dced67eec6e2ec9f708b347e4d49981fafccc6c795f73e4cf_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01853cca36a1042f42860bb89048c4a09de76b2cfac412fd78e38fd74376ca39_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:4970ca74fcbc6aaf9f64812f37e31426444d041345541d498b12a819cbe29299_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:527395e13fedf00d5ffa4a2c70602cab213ff9c826940a529150d6b1df4f7395_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b3ca415e883c09cf8f42f2b1b63ddf007fae7ac183f2185201efecf48489636e_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-42499"
        },
        {
          "category": "external",
          "summary": "RHBZ#2467809",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/771520",
          "url": "https://go.dev/cl/771520"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/78987",
          "url": "https://go.dev/issue/78987"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
          "url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4977",
          "url": "https://pkg.go.dev/vuln/GO-2026-4977"
        }
      ],
      "release_date": "2026-05-07T19:41:18.615000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-18T16:40:44+00:00",
          "details": "For OpenShift Container Platform 4.21 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/ocp-4-21-release-notes\n\nFor Red Hat OpenShift Logging 6.5, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.5",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:17a67ac2934041f996b19574bbeffa9e56d8486969785ae219215384cfd4162f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:18ea59f76a1ddd747712fbb3314f55cfdefb4e12a39ad9f0d22c26d25e8b04b4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1c687dff9904d440a9efefc95bd82ac1cf10df5c030ee8a3164621bc84e447fc_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:fad58cb6ca31afd96f8ef741cad73c4328c24361dfad022848c227f129c5b4b5_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:56340"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:40c83c7127b6b90b9984b3c73b3cbad1c3a8f7af3dc792e5320d6defb9eb22e0_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5b4e3a421f13bd33d03185f4071b3e633767eb06a9875a02ca793d43fd1514c7_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:93e605c4231903b7a73e7578f8977a5c6029c767ab801f29b726d2e6ff290feb_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d9bc0d110bbc7b7ec8a2401f34cde12e470980086bb04fc532a9885917c06b7f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ee6505e36b31ecc38b080c2e56b7b26afd3c7db9b30d17947e6bcb6cf7f0e44e_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:01271821684bdb4791a1e757092e3799247ac91519f8516599c7cf9080407076_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:958178be4fc3798cdd531660e14514c370ac334b8a27a31a8f08db3244f17341_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:b881afc31c6e287608699dfc9d38bf38ff3616b2b133cc4726f0060ce99b16de_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:c237813ec28c79232f1f8d5bb2f875157323d10ddceddf3f722cd885c3c5c4d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:15b1be865c1d4df2fd1171acb46922ba864555b18dfc71febd372e11a5d0eb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:55c2e8cbb4c7e89ed719c136d401c1fa49198e4a98a2dfe78c5eacb5ee2cadc8_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8d334ebdf403e2a15a664c1960044c6852f3e00b55ce2f2e808f6213ae70e00f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ceb52082d9002ba1762e6653bc39b4253f05a7cd58a42c664c7a658e6133a7e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:17a67ac2934041f996b19574bbeffa9e56d8486969785ae219215384cfd4162f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:18ea59f76a1ddd747712fbb3314f55cfdefb4e12a39ad9f0d22c26d25e8b04b4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1c687dff9904d440a9efefc95bd82ac1cf10df5c030ee8a3164621bc84e447fc_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:fad58cb6ca31afd96f8ef741cad73c4328c24361dfad022848c227f129c5b4b5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:21c630e1de77a6e18b0b774ebfc5ccef2191fef60da0c7914d0a81d5be236ea3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:51538cb4de3a2767509d5a7869f9a63a054416e7163c38714bce9bd83da1b619_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:902fe34ead11574878df61323db6ac53f3ad55d13d40f72b8d514ea0356e1a81_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bff77adab78f874b962324a9674157383dfe4570309d24c7b2a6acebead62a39_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2a0befa5c4dbcb56ef33f46ccdb27d5e02f8f5facdbf2fa0b9c6e6dd53a476e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:9ffa7e5a2ed3f92a6eb30792dc878add38b41f7ce5ca03a6f1a2c8b12300070a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a6a946b8e424db855be70e94c1cab3e5dcf56be8b5caec8d48b3b4579310a25a_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:de70e3309c799110feacba1b6d64bf153818e21790500da6ea75c05f276bedcd_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f49b88b70726cb222fa43685d3a6704ccd8778a2a82b7c5c4aee4b47c54d3bcb_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:11caeb0f6c63f361d12e2c223aa0e1e363c79d8495a008f5b996184dfdd15d57_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:66b2f52b2abd9e3a1fcd1ef4aa926a0f8613730918a2b7743ce61d1ce9b103c7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:deefcb8674d1899581331ba7899baedb7f9c5355b2b3e4f11b5414b1ae58a8be_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:f980269a8879cd0dced67eec6e2ec9f708b347e4d49981fafccc6c795f73e4cf_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01853cca36a1042f42860bb89048c4a09de76b2cfac412fd78e38fd74376ca39_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:4970ca74fcbc6aaf9f64812f37e31426444d041345541d498b12a819cbe29299_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:527395e13fedf00d5ffa4a2c70602cab213ff9c826940a529150d6b1df4f7395_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b3ca415e883c09cf8f42f2b1b63ddf007fae7ac183f2185201efecf48489636e_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:40c83c7127b6b90b9984b3c73b3cbad1c3a8f7af3dc792e5320d6defb9eb22e0_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5b4e3a421f13bd33d03185f4071b3e633767eb06a9875a02ca793d43fd1514c7_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:93e605c4231903b7a73e7578f8977a5c6029c767ab801f29b726d2e6ff290feb_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d9bc0d110bbc7b7ec8a2401f34cde12e470980086bb04fc532a9885917c06b7f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ee6505e36b31ecc38b080c2e56b7b26afd3c7db9b30d17947e6bcb6cf7f0e44e_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:01271821684bdb4791a1e757092e3799247ac91519f8516599c7cf9080407076_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:958178be4fc3798cdd531660e14514c370ac334b8a27a31a8f08db3244f17341_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:b881afc31c6e287608699dfc9d38bf38ff3616b2b133cc4726f0060ce99b16de_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:c237813ec28c79232f1f8d5bb2f875157323d10ddceddf3f722cd885c3c5c4d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:15b1be865c1d4df2fd1171acb46922ba864555b18dfc71febd372e11a5d0eb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:55c2e8cbb4c7e89ed719c136d401c1fa49198e4a98a2dfe78c5eacb5ee2cadc8_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8d334ebdf403e2a15a664c1960044c6852f3e00b55ce2f2e808f6213ae70e00f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ceb52082d9002ba1762e6653bc39b4253f05a7cd58a42c664c7a658e6133a7e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:17a67ac2934041f996b19574bbeffa9e56d8486969785ae219215384cfd4162f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:18ea59f76a1ddd747712fbb3314f55cfdefb4e12a39ad9f0d22c26d25e8b04b4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1c687dff9904d440a9efefc95bd82ac1cf10df5c030ee8a3164621bc84e447fc_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:fad58cb6ca31afd96f8ef741cad73c4328c24361dfad022848c227f129c5b4b5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:21c630e1de77a6e18b0b774ebfc5ccef2191fef60da0c7914d0a81d5be236ea3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:51538cb4de3a2767509d5a7869f9a63a054416e7163c38714bce9bd83da1b619_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:902fe34ead11574878df61323db6ac53f3ad55d13d40f72b8d514ea0356e1a81_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bff77adab78f874b962324a9674157383dfe4570309d24c7b2a6acebead62a39_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2a0befa5c4dbcb56ef33f46ccdb27d5e02f8f5facdbf2fa0b9c6e6dd53a476e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:9ffa7e5a2ed3f92a6eb30792dc878add38b41f7ce5ca03a6f1a2c8b12300070a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a6a946b8e424db855be70e94c1cab3e5dcf56be8b5caec8d48b3b4579310a25a_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:de70e3309c799110feacba1b6d64bf153818e21790500da6ea75c05f276bedcd_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f49b88b70726cb222fa43685d3a6704ccd8778a2a82b7c5c4aee4b47c54d3bcb_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:11caeb0f6c63f361d12e2c223aa0e1e363c79d8495a008f5b996184dfdd15d57_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:66b2f52b2abd9e3a1fcd1ef4aa926a0f8613730918a2b7743ce61d1ce9b103c7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:deefcb8674d1899581331ba7899baedb7f9c5355b2b3e4f11b5414b1ae58a8be_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:f980269a8879cd0dced67eec6e2ec9f708b347e4d49981fafccc6c795f73e4cf_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01853cca36a1042f42860bb89048c4a09de76b2cfac412fd78e38fd74376ca39_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:4970ca74fcbc6aaf9f64812f37e31426444d041345541d498b12a819cbe29299_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:527395e13fedf00d5ffa4a2c70602cab213ff9c826940a529150d6b1df4f7395_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b3ca415e883c09cf8f42f2b1b63ddf007fae7ac183f2185201efecf48489636e_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
    },
    {
      "cve": "CVE-2026-42502",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2026-05-22T16:01:11.151484+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:40c83c7127b6b90b9984b3c73b3cbad1c3a8f7af3dc792e5320d6defb9eb22e0_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:01271821684bdb4791a1e757092e3799247ac91519f8516599c7cf9080407076_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:958178be4fc3798cdd531660e14514c370ac334b8a27a31a8f08db3244f17341_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:b881afc31c6e287608699dfc9d38bf38ff3616b2b133cc4726f0060ce99b16de_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:c237813ec28c79232f1f8d5bb2f875157323d10ddceddf3f722cd885c3c5c4d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:15b1be865c1d4df2fd1171acb46922ba864555b18dfc71febd372e11a5d0eb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:55c2e8cbb4c7e89ed719c136d401c1fa49198e4a98a2dfe78c5eacb5ee2cadc8_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8d334ebdf403e2a15a664c1960044c6852f3e00b55ce2f2e808f6213ae70e00f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ceb52082d9002ba1762e6653bc39b4253f05a7cd58a42c664c7a658e6133a7e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:17a67ac2934041f996b19574bbeffa9e56d8486969785ae219215384cfd4162f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:18ea59f76a1ddd747712fbb3314f55cfdefb4e12a39ad9f0d22c26d25e8b04b4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1c687dff9904d440a9efefc95bd82ac1cf10df5c030ee8a3164621bc84e447fc_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:fad58cb6ca31afd96f8ef741cad73c4328c24361dfad022848c227f129c5b4b5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:21c630e1de77a6e18b0b774ebfc5ccef2191fef60da0c7914d0a81d5be236ea3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:51538cb4de3a2767509d5a7869f9a63a054416e7163c38714bce9bd83da1b619_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:902fe34ead11574878df61323db6ac53f3ad55d13d40f72b8d514ea0356e1a81_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bff77adab78f874b962324a9674157383dfe4570309d24c7b2a6acebead62a39_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2a0befa5c4dbcb56ef33f46ccdb27d5e02f8f5facdbf2fa0b9c6e6dd53a476e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:9ffa7e5a2ed3f92a6eb30792dc878add38b41f7ce5ca03a6f1a2c8b12300070a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a6a946b8e424db855be70e94c1cab3e5dcf56be8b5caec8d48b3b4579310a25a_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:de70e3309c799110feacba1b6d64bf153818e21790500da6ea75c05f276bedcd_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f49b88b70726cb222fa43685d3a6704ccd8778a2a82b7c5c4aee4b47c54d3bcb_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:11caeb0f6c63f361d12e2c223aa0e1e363c79d8495a008f5b996184dfdd15d57_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:66b2f52b2abd9e3a1fcd1ef4aa926a0f8613730918a2b7743ce61d1ce9b103c7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:deefcb8674d1899581331ba7899baedb7f9c5355b2b3e4f11b5414b1ae58a8be_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:f980269a8879cd0dced67eec6e2ec9f708b347e4d49981fafccc6c795f73e4cf_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01853cca36a1042f42860bb89048c4a09de76b2cfac412fd78e38fd74376ca39_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:4970ca74fcbc6aaf9f64812f37e31426444d041345541d498b12a819cbe29299_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:527395e13fedf00d5ffa4a2c70602cab213ff9c826940a529150d6b1df4f7395_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b3ca415e883c09cf8f42f2b1b63ddf007fae7ac183f2185201efecf48489636e_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480762"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/net/html. This vulnerability allows an attacker to manipulate how HTML is processed and displayed. By providing specially crafted HTML, an attacker can cause an unexpected structure in the rendered output. This can lead to Cross-Site Scripting (XSS) attacks, where malicious scripts are executed in a user\u0027s web browser, potentially compromising user data or taking control of their session.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw in golang.org/x/net/html can lead to Cross-Site Scripting (XSS) in applications that parse and render untrusted HTML, even with sanitization attempts. This is due to an unexpected HTML tree structure, allowing malicious scripts to execute in a user\u0027s browser.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5b4e3a421f13bd33d03185f4071b3e633767eb06a9875a02ca793d43fd1514c7_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:93e605c4231903b7a73e7578f8977a5c6029c767ab801f29b726d2e6ff290feb_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d9bc0d110bbc7b7ec8a2401f34cde12e470980086bb04fc532a9885917c06b7f_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ee6505e36b31ecc38b080c2e56b7b26afd3c7db9b30d17947e6bcb6cf7f0e44e_s390x"
        ],
        "known_not_affected": [
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:40c83c7127b6b90b9984b3c73b3cbad1c3a8f7af3dc792e5320d6defb9eb22e0_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:01271821684bdb4791a1e757092e3799247ac91519f8516599c7cf9080407076_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:958178be4fc3798cdd531660e14514c370ac334b8a27a31a8f08db3244f17341_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:b881afc31c6e287608699dfc9d38bf38ff3616b2b133cc4726f0060ce99b16de_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:c237813ec28c79232f1f8d5bb2f875157323d10ddceddf3f722cd885c3c5c4d5_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:15b1be865c1d4df2fd1171acb46922ba864555b18dfc71febd372e11a5d0eb8e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:55c2e8cbb4c7e89ed719c136d401c1fa49198e4a98a2dfe78c5eacb5ee2cadc8_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8d334ebdf403e2a15a664c1960044c6852f3e00b55ce2f2e808f6213ae70e00f_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ceb52082d9002ba1762e6653bc39b4253f05a7cd58a42c664c7a658e6133a7e8_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:17a67ac2934041f996b19574bbeffa9e56d8486969785ae219215384cfd4162f_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:18ea59f76a1ddd747712fbb3314f55cfdefb4e12a39ad9f0d22c26d25e8b04b4_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1c687dff9904d440a9efefc95bd82ac1cf10df5c030ee8a3164621bc84e447fc_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:fad58cb6ca31afd96f8ef741cad73c4328c24361dfad022848c227f129c5b4b5_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:21c630e1de77a6e18b0b774ebfc5ccef2191fef60da0c7914d0a81d5be236ea3_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:51538cb4de3a2767509d5a7869f9a63a054416e7163c38714bce9bd83da1b619_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:902fe34ead11574878df61323db6ac53f3ad55d13d40f72b8d514ea0356e1a81_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bff77adab78f874b962324a9674157383dfe4570309d24c7b2a6acebead62a39_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2a0befa5c4dbcb56ef33f46ccdb27d5e02f8f5facdbf2fa0b9c6e6dd53a476e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:9ffa7e5a2ed3f92a6eb30792dc878add38b41f7ce5ca03a6f1a2c8b12300070a_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a6a946b8e424db855be70e94c1cab3e5dcf56be8b5caec8d48b3b4579310a25a_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:de70e3309c799110feacba1b6d64bf153818e21790500da6ea75c05f276bedcd_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f49b88b70726cb222fa43685d3a6704ccd8778a2a82b7c5c4aee4b47c54d3bcb_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:11caeb0f6c63f361d12e2c223aa0e1e363c79d8495a008f5b996184dfdd15d57_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:66b2f52b2abd9e3a1fcd1ef4aa926a0f8613730918a2b7743ce61d1ce9b103c7_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:deefcb8674d1899581331ba7899baedb7f9c5355b2b3e4f11b5414b1ae58a8be_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:f980269a8879cd0dced67eec6e2ec9f708b347e4d49981fafccc6c795f73e4cf_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01853cca36a1042f42860bb89048c4a09de76b2cfac412fd78e38fd74376ca39_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:4970ca74fcbc6aaf9f64812f37e31426444d041345541d498b12a819cbe29299_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:527395e13fedf00d5ffa4a2c70602cab213ff9c826940a529150d6b1df4f7395_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b3ca415e883c09cf8f42f2b1b63ddf007fae7ac183f2185201efecf48489636e_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-42502"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480762",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480762"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-42502",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-42502"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42502",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42502"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781701",
          "url": "https://go.dev/cl/781701"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79572",
          "url": "https://go.dev/issue/79572"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
          "url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5027",
          "url": "https://pkg.go.dev/vuln/GO-2026-5027"
        }
      ],
      "release_date": "2026-05-22T15:01:21.649000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-18T16:40:44+00:00",
          "details": "For OpenShift Container Platform 4.21 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/ocp-4-21-release-notes\n\nFor Red Hat OpenShift Logging 6.5, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.5",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5b4e3a421f13bd33d03185f4071b3e633767eb06a9875a02ca793d43fd1514c7_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:93e605c4231903b7a73e7578f8977a5c6029c767ab801f29b726d2e6ff290feb_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d9bc0d110bbc7b7ec8a2401f34cde12e470980086bb04fc532a9885917c06b7f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ee6505e36b31ecc38b080c2e56b7b26afd3c7db9b30d17947e6bcb6cf7f0e44e_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:56340"
        },
        {
          "category": "workaround",
          "details": "Applications utilizing `golang.org/x/net/html` should implement robust sanitization of all untrusted HTML input before rendering to prevent the creation of unexpected HTML structures that could facilitate XSS attacks. If an application does not require rendering arbitrary HTML, it should avoid processing such input.",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:40c83c7127b6b90b9984b3c73b3cbad1c3a8f7af3dc792e5320d6defb9eb22e0_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5b4e3a421f13bd33d03185f4071b3e633767eb06a9875a02ca793d43fd1514c7_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:93e605c4231903b7a73e7578f8977a5c6029c767ab801f29b726d2e6ff290feb_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d9bc0d110bbc7b7ec8a2401f34cde12e470980086bb04fc532a9885917c06b7f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ee6505e36b31ecc38b080c2e56b7b26afd3c7db9b30d17947e6bcb6cf7f0e44e_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:01271821684bdb4791a1e757092e3799247ac91519f8516599c7cf9080407076_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:958178be4fc3798cdd531660e14514c370ac334b8a27a31a8f08db3244f17341_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:b881afc31c6e287608699dfc9d38bf38ff3616b2b133cc4726f0060ce99b16de_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:c237813ec28c79232f1f8d5bb2f875157323d10ddceddf3f722cd885c3c5c4d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:15b1be865c1d4df2fd1171acb46922ba864555b18dfc71febd372e11a5d0eb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:55c2e8cbb4c7e89ed719c136d401c1fa49198e4a98a2dfe78c5eacb5ee2cadc8_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8d334ebdf403e2a15a664c1960044c6852f3e00b55ce2f2e808f6213ae70e00f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ceb52082d9002ba1762e6653bc39b4253f05a7cd58a42c664c7a658e6133a7e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:17a67ac2934041f996b19574bbeffa9e56d8486969785ae219215384cfd4162f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:18ea59f76a1ddd747712fbb3314f55cfdefb4e12a39ad9f0d22c26d25e8b04b4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1c687dff9904d440a9efefc95bd82ac1cf10df5c030ee8a3164621bc84e447fc_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:fad58cb6ca31afd96f8ef741cad73c4328c24361dfad022848c227f129c5b4b5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:21c630e1de77a6e18b0b774ebfc5ccef2191fef60da0c7914d0a81d5be236ea3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:51538cb4de3a2767509d5a7869f9a63a054416e7163c38714bce9bd83da1b619_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:902fe34ead11574878df61323db6ac53f3ad55d13d40f72b8d514ea0356e1a81_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bff77adab78f874b962324a9674157383dfe4570309d24c7b2a6acebead62a39_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2a0befa5c4dbcb56ef33f46ccdb27d5e02f8f5facdbf2fa0b9c6e6dd53a476e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:9ffa7e5a2ed3f92a6eb30792dc878add38b41f7ce5ca03a6f1a2c8b12300070a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a6a946b8e424db855be70e94c1cab3e5dcf56be8b5caec8d48b3b4579310a25a_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:de70e3309c799110feacba1b6d64bf153818e21790500da6ea75c05f276bedcd_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f49b88b70726cb222fa43685d3a6704ccd8778a2a82b7c5c4aee4b47c54d3bcb_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:11caeb0f6c63f361d12e2c223aa0e1e363c79d8495a008f5b996184dfdd15d57_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:66b2f52b2abd9e3a1fcd1ef4aa926a0f8613730918a2b7743ce61d1ce9b103c7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:deefcb8674d1899581331ba7899baedb7f9c5355b2b3e4f11b5414b1ae58a8be_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:f980269a8879cd0dced67eec6e2ec9f708b347e4d49981fafccc6c795f73e4cf_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01853cca36a1042f42860bb89048c4a09de76b2cfac412fd78e38fd74376ca39_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:4970ca74fcbc6aaf9f64812f37e31426444d041345541d498b12a819cbe29299_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:527395e13fedf00d5ffa4a2c70602cab213ff9c826940a529150d6b1df4f7395_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b3ca415e883c09cf8f42f2b1b63ddf007fae7ac183f2185201efecf48489636e_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:40c83c7127b6b90b9984b3c73b3cbad1c3a8f7af3dc792e5320d6defb9eb22e0_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5b4e3a421f13bd33d03185f4071b3e633767eb06a9875a02ca793d43fd1514c7_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:93e605c4231903b7a73e7578f8977a5c6029c767ab801f29b726d2e6ff290feb_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d9bc0d110bbc7b7ec8a2401f34cde12e470980086bb04fc532a9885917c06b7f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ee6505e36b31ecc38b080c2e56b7b26afd3c7db9b30d17947e6bcb6cf7f0e44e_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:01271821684bdb4791a1e757092e3799247ac91519f8516599c7cf9080407076_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:958178be4fc3798cdd531660e14514c370ac334b8a27a31a8f08db3244f17341_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:b881afc31c6e287608699dfc9d38bf38ff3616b2b133cc4726f0060ce99b16de_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:c237813ec28c79232f1f8d5bb2f875157323d10ddceddf3f722cd885c3c5c4d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:15b1be865c1d4df2fd1171acb46922ba864555b18dfc71febd372e11a5d0eb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:55c2e8cbb4c7e89ed719c136d401c1fa49198e4a98a2dfe78c5eacb5ee2cadc8_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8d334ebdf403e2a15a664c1960044c6852f3e00b55ce2f2e808f6213ae70e00f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ceb52082d9002ba1762e6653bc39b4253f05a7cd58a42c664c7a658e6133a7e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:17a67ac2934041f996b19574bbeffa9e56d8486969785ae219215384cfd4162f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:18ea59f76a1ddd747712fbb3314f55cfdefb4e12a39ad9f0d22c26d25e8b04b4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1c687dff9904d440a9efefc95bd82ac1cf10df5c030ee8a3164621bc84e447fc_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:fad58cb6ca31afd96f8ef741cad73c4328c24361dfad022848c227f129c5b4b5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:21c630e1de77a6e18b0b774ebfc5ccef2191fef60da0c7914d0a81d5be236ea3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:51538cb4de3a2767509d5a7869f9a63a054416e7163c38714bce9bd83da1b619_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:902fe34ead11574878df61323db6ac53f3ad55d13d40f72b8d514ea0356e1a81_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bff77adab78f874b962324a9674157383dfe4570309d24c7b2a6acebead62a39_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2a0befa5c4dbcb56ef33f46ccdb27d5e02f8f5facdbf2fa0b9c6e6dd53a476e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:9ffa7e5a2ed3f92a6eb30792dc878add38b41f7ce5ca03a6f1a2c8b12300070a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a6a946b8e424db855be70e94c1cab3e5dcf56be8b5caec8d48b3b4579310a25a_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:de70e3309c799110feacba1b6d64bf153818e21790500da6ea75c05f276bedcd_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f49b88b70726cb222fa43685d3a6704ccd8778a2a82b7c5c4aee4b47c54d3bcb_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:11caeb0f6c63f361d12e2c223aa0e1e363c79d8495a008f5b996184dfdd15d57_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:66b2f52b2abd9e3a1fcd1ef4aa926a0f8613730918a2b7743ce61d1ce9b103c7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:deefcb8674d1899581331ba7899baedb7f9c5355b2b3e4f11b5414b1ae58a8be_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:f980269a8879cd0dced67eec6e2ec9f708b347e4d49981fafccc6c795f73e4cf_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01853cca36a1042f42860bb89048c4a09de76b2cfac412fd78e38fd74376ca39_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:4970ca74fcbc6aaf9f64812f37e31426444d041345541d498b12a819cbe29299_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:527395e13fedf00d5ffa4a2c70602cab213ff9c826940a529150d6b1df4f7395_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b3ca415e883c09cf8f42f2b1b63ddf007fae7ac183f2185201efecf48489636e_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering"
    },
    {
      "cve": "CVE-2026-42504",
      "cwe": {
        "id": "CWE-1050",
        "name": "Excessive Platform Resource Consumption within a Loop"
      },
      "discovery_date": "2026-06-02T23:01:00.320527+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:40c83c7127b6b90b9984b3c73b3cbad1c3a8f7af3dc792e5320d6defb9eb22e0_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5b4e3a421f13bd33d03185f4071b3e633767eb06a9875a02ca793d43fd1514c7_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:93e605c4231903b7a73e7578f8977a5c6029c767ab801f29b726d2e6ff290feb_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d9bc0d110bbc7b7ec8a2401f34cde12e470980086bb04fc532a9885917c06b7f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ee6505e36b31ecc38b080c2e56b7b26afd3c7db9b30d17947e6bcb6cf7f0e44e_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:15b1be865c1d4df2fd1171acb46922ba864555b18dfc71febd372e11a5d0eb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:55c2e8cbb4c7e89ed719c136d401c1fa49198e4a98a2dfe78c5eacb5ee2cadc8_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8d334ebdf403e2a15a664c1960044c6852f3e00b55ce2f2e808f6213ae70e00f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ceb52082d9002ba1762e6653bc39b4253f05a7cd58a42c664c7a658e6133a7e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:17a67ac2934041f996b19574bbeffa9e56d8486969785ae219215384cfd4162f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:18ea59f76a1ddd747712fbb3314f55cfdefb4e12a39ad9f0d22c26d25e8b04b4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1c687dff9904d440a9efefc95bd82ac1cf10df5c030ee8a3164621bc84e447fc_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:fad58cb6ca31afd96f8ef741cad73c4328c24361dfad022848c227f129c5b4b5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:21c630e1de77a6e18b0b774ebfc5ccef2191fef60da0c7914d0a81d5be236ea3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:51538cb4de3a2767509d5a7869f9a63a054416e7163c38714bce9bd83da1b619_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:902fe34ead11574878df61323db6ac53f3ad55d13d40f72b8d514ea0356e1a81_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bff77adab78f874b962324a9674157383dfe4570309d24c7b2a6acebead62a39_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2a0befa5c4dbcb56ef33f46ccdb27d5e02f8f5facdbf2fa0b9c6e6dd53a476e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:9ffa7e5a2ed3f92a6eb30792dc878add38b41f7ce5ca03a6f1a2c8b12300070a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a6a946b8e424db855be70e94c1cab3e5dcf56be8b5caec8d48b3b4579310a25a_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:de70e3309c799110feacba1b6d64bf153818e21790500da6ea75c05f276bedcd_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f49b88b70726cb222fa43685d3a6704ccd8778a2a82b7c5c4aee4b47c54d3bcb_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:11caeb0f6c63f361d12e2c223aa0e1e363c79d8495a008f5b996184dfdd15d57_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:66b2f52b2abd9e3a1fcd1ef4aa926a0f8613730918a2b7743ce61d1ce9b103c7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:deefcb8674d1899581331ba7899baedb7f9c5355b2b3e4f11b5414b1ae58a8be_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:f980269a8879cd0dced67eec6e2ec9f708b347e4d49981fafccc6c795f73e4cf_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01853cca36a1042f42860bb89048c4a09de76b2cfac412fd78e38fd74376ca39_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:4970ca74fcbc6aaf9f64812f37e31426444d041345541d498b12a819cbe29299_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:527395e13fedf00d5ffa4a2c70602cab213ff9c826940a529150d6b1df4f7395_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b3ca415e883c09cf8f42f2b1b63ddf007fae7ac183f2185201efecf48489636e_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2484204"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is rated as an Important severity flaw. A remote attacker could trigger a Denial of Service by sending a crafted MIME header with numerous invalid encoded-words to an application utilizing the affected Golang MIME package. This could lead to excessive CPU consumption on the system processing the malformed header, impacting service availability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:01271821684bdb4791a1e757092e3799247ac91519f8516599c7cf9080407076_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:958178be4fc3798cdd531660e14514c370ac334b8a27a31a8f08db3244f17341_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:b881afc31c6e287608699dfc9d38bf38ff3616b2b133cc4726f0060ce99b16de_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:c237813ec28c79232f1f8d5bb2f875157323d10ddceddf3f722cd885c3c5c4d5_ppc64le"
        ],
        "known_not_affected": [
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:40c83c7127b6b90b9984b3c73b3cbad1c3a8f7af3dc792e5320d6defb9eb22e0_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5b4e3a421f13bd33d03185f4071b3e633767eb06a9875a02ca793d43fd1514c7_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:93e605c4231903b7a73e7578f8977a5c6029c767ab801f29b726d2e6ff290feb_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d9bc0d110bbc7b7ec8a2401f34cde12e470980086bb04fc532a9885917c06b7f_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ee6505e36b31ecc38b080c2e56b7b26afd3c7db9b30d17947e6bcb6cf7f0e44e_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:15b1be865c1d4df2fd1171acb46922ba864555b18dfc71febd372e11a5d0eb8e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:55c2e8cbb4c7e89ed719c136d401c1fa49198e4a98a2dfe78c5eacb5ee2cadc8_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8d334ebdf403e2a15a664c1960044c6852f3e00b55ce2f2e808f6213ae70e00f_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ceb52082d9002ba1762e6653bc39b4253f05a7cd58a42c664c7a658e6133a7e8_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:17a67ac2934041f996b19574bbeffa9e56d8486969785ae219215384cfd4162f_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:18ea59f76a1ddd747712fbb3314f55cfdefb4e12a39ad9f0d22c26d25e8b04b4_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1c687dff9904d440a9efefc95bd82ac1cf10df5c030ee8a3164621bc84e447fc_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:fad58cb6ca31afd96f8ef741cad73c4328c24361dfad022848c227f129c5b4b5_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:21c630e1de77a6e18b0b774ebfc5ccef2191fef60da0c7914d0a81d5be236ea3_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:51538cb4de3a2767509d5a7869f9a63a054416e7163c38714bce9bd83da1b619_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:902fe34ead11574878df61323db6ac53f3ad55d13d40f72b8d514ea0356e1a81_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bff77adab78f874b962324a9674157383dfe4570309d24c7b2a6acebead62a39_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2a0befa5c4dbcb56ef33f46ccdb27d5e02f8f5facdbf2fa0b9c6e6dd53a476e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:9ffa7e5a2ed3f92a6eb30792dc878add38b41f7ce5ca03a6f1a2c8b12300070a_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a6a946b8e424db855be70e94c1cab3e5dcf56be8b5caec8d48b3b4579310a25a_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:de70e3309c799110feacba1b6d64bf153818e21790500da6ea75c05f276bedcd_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f49b88b70726cb222fa43685d3a6704ccd8778a2a82b7c5c4aee4b47c54d3bcb_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:11caeb0f6c63f361d12e2c223aa0e1e363c79d8495a008f5b996184dfdd15d57_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:66b2f52b2abd9e3a1fcd1ef4aa926a0f8613730918a2b7743ce61d1ce9b103c7_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:deefcb8674d1899581331ba7899baedb7f9c5355b2b3e4f11b5414b1ae58a8be_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:f980269a8879cd0dced67eec6e2ec9f708b347e4d49981fafccc6c795f73e4cf_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01853cca36a1042f42860bb89048c4a09de76b2cfac412fd78e38fd74376ca39_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:4970ca74fcbc6aaf9f64812f37e31426444d041345541d498b12a819cbe29299_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:527395e13fedf00d5ffa4a2c70602cab213ff9c826940a529150d6b1df4f7395_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b3ca415e883c09cf8f42f2b1b63ddf007fae7ac183f2185201efecf48489636e_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-42504"
        },
        {
          "category": "external",
          "summary": "RHBZ#2484204",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484204"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-42504",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-42504"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/774481",
          "url": "https://go.dev/cl/774481"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79217",
          "url": "https://go.dev/issue/79217"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
          "url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5038",
          "url": "https://pkg.go.dev/vuln/GO-2026-5038"
        }
      ],
      "release_date": "2026-06-02T22:01:37.219000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-18T16:40:44+00:00",
          "details": "For OpenShift Container Platform 4.21 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/ocp-4-21-release-notes\n\nFor Red Hat OpenShift Logging 6.5, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.5",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:01271821684bdb4791a1e757092e3799247ac91519f8516599c7cf9080407076_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:958178be4fc3798cdd531660e14514c370ac334b8a27a31a8f08db3244f17341_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:b881afc31c6e287608699dfc9d38bf38ff3616b2b133cc4726f0060ce99b16de_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:c237813ec28c79232f1f8d5bb2f875157323d10ddceddf3f722cd885c3c5c4d5_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:56340"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, restrict network access to services that process MIME headers from untrusted sources. Implement input validation and sanitization for all incoming data, especially MIME headers, to prevent maliciously crafted content from being processed by applications utilizing the vulnerable Golang MIME package.",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:40c83c7127b6b90b9984b3c73b3cbad1c3a8f7af3dc792e5320d6defb9eb22e0_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5b4e3a421f13bd33d03185f4071b3e633767eb06a9875a02ca793d43fd1514c7_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:93e605c4231903b7a73e7578f8977a5c6029c767ab801f29b726d2e6ff290feb_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d9bc0d110bbc7b7ec8a2401f34cde12e470980086bb04fc532a9885917c06b7f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ee6505e36b31ecc38b080c2e56b7b26afd3c7db9b30d17947e6bcb6cf7f0e44e_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:01271821684bdb4791a1e757092e3799247ac91519f8516599c7cf9080407076_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:958178be4fc3798cdd531660e14514c370ac334b8a27a31a8f08db3244f17341_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:b881afc31c6e287608699dfc9d38bf38ff3616b2b133cc4726f0060ce99b16de_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:c237813ec28c79232f1f8d5bb2f875157323d10ddceddf3f722cd885c3c5c4d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:15b1be865c1d4df2fd1171acb46922ba864555b18dfc71febd372e11a5d0eb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:55c2e8cbb4c7e89ed719c136d401c1fa49198e4a98a2dfe78c5eacb5ee2cadc8_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8d334ebdf403e2a15a664c1960044c6852f3e00b55ce2f2e808f6213ae70e00f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ceb52082d9002ba1762e6653bc39b4253f05a7cd58a42c664c7a658e6133a7e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:17a67ac2934041f996b19574bbeffa9e56d8486969785ae219215384cfd4162f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:18ea59f76a1ddd747712fbb3314f55cfdefb4e12a39ad9f0d22c26d25e8b04b4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1c687dff9904d440a9efefc95bd82ac1cf10df5c030ee8a3164621bc84e447fc_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:fad58cb6ca31afd96f8ef741cad73c4328c24361dfad022848c227f129c5b4b5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:21c630e1de77a6e18b0b774ebfc5ccef2191fef60da0c7914d0a81d5be236ea3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:51538cb4de3a2767509d5a7869f9a63a054416e7163c38714bce9bd83da1b619_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:902fe34ead11574878df61323db6ac53f3ad55d13d40f72b8d514ea0356e1a81_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bff77adab78f874b962324a9674157383dfe4570309d24c7b2a6acebead62a39_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2a0befa5c4dbcb56ef33f46ccdb27d5e02f8f5facdbf2fa0b9c6e6dd53a476e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:9ffa7e5a2ed3f92a6eb30792dc878add38b41f7ce5ca03a6f1a2c8b12300070a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a6a946b8e424db855be70e94c1cab3e5dcf56be8b5caec8d48b3b4579310a25a_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:de70e3309c799110feacba1b6d64bf153818e21790500da6ea75c05f276bedcd_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f49b88b70726cb222fa43685d3a6704ccd8778a2a82b7c5c4aee4b47c54d3bcb_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:11caeb0f6c63f361d12e2c223aa0e1e363c79d8495a008f5b996184dfdd15d57_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:66b2f52b2abd9e3a1fcd1ef4aa926a0f8613730918a2b7743ce61d1ce9b103c7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:deefcb8674d1899581331ba7899baedb7f9c5355b2b3e4f11b5414b1ae58a8be_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:f980269a8879cd0dced67eec6e2ec9f708b347e4d49981fafccc6c795f73e4cf_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01853cca36a1042f42860bb89048c4a09de76b2cfac412fd78e38fd74376ca39_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:4970ca74fcbc6aaf9f64812f37e31426444d041345541d498b12a819cbe29299_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:527395e13fedf00d5ffa4a2c70602cab213ff9c826940a529150d6b1df4f7395_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b3ca415e883c09cf8f42f2b1b63ddf007fae7ac183f2185201efecf48489636e_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:40c83c7127b6b90b9984b3c73b3cbad1c3a8f7af3dc792e5320d6defb9eb22e0_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5b4e3a421f13bd33d03185f4071b3e633767eb06a9875a02ca793d43fd1514c7_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:93e605c4231903b7a73e7578f8977a5c6029c767ab801f29b726d2e6ff290feb_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d9bc0d110bbc7b7ec8a2401f34cde12e470980086bb04fc532a9885917c06b7f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ee6505e36b31ecc38b080c2e56b7b26afd3c7db9b30d17947e6bcb6cf7f0e44e_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:01271821684bdb4791a1e757092e3799247ac91519f8516599c7cf9080407076_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:958178be4fc3798cdd531660e14514c370ac334b8a27a31a8f08db3244f17341_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:b881afc31c6e287608699dfc9d38bf38ff3616b2b133cc4726f0060ce99b16de_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:c237813ec28c79232f1f8d5bb2f875157323d10ddceddf3f722cd885c3c5c4d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:15b1be865c1d4df2fd1171acb46922ba864555b18dfc71febd372e11a5d0eb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:55c2e8cbb4c7e89ed719c136d401c1fa49198e4a98a2dfe78c5eacb5ee2cadc8_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8d334ebdf403e2a15a664c1960044c6852f3e00b55ce2f2e808f6213ae70e00f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ceb52082d9002ba1762e6653bc39b4253f05a7cd58a42c664c7a658e6133a7e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:17a67ac2934041f996b19574bbeffa9e56d8486969785ae219215384cfd4162f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:18ea59f76a1ddd747712fbb3314f55cfdefb4e12a39ad9f0d22c26d25e8b04b4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1c687dff9904d440a9efefc95bd82ac1cf10df5c030ee8a3164621bc84e447fc_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:fad58cb6ca31afd96f8ef741cad73c4328c24361dfad022848c227f129c5b4b5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:21c630e1de77a6e18b0b774ebfc5ccef2191fef60da0c7914d0a81d5be236ea3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:51538cb4de3a2767509d5a7869f9a63a054416e7163c38714bce9bd83da1b619_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:902fe34ead11574878df61323db6ac53f3ad55d13d40f72b8d514ea0356e1a81_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bff77adab78f874b962324a9674157383dfe4570309d24c7b2a6acebead62a39_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2a0befa5c4dbcb56ef33f46ccdb27d5e02f8f5facdbf2fa0b9c6e6dd53a476e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:9ffa7e5a2ed3f92a6eb30792dc878add38b41f7ce5ca03a6f1a2c8b12300070a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a6a946b8e424db855be70e94c1cab3e5dcf56be8b5caec8d48b3b4579310a25a_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:de70e3309c799110feacba1b6d64bf153818e21790500da6ea75c05f276bedcd_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f49b88b70726cb222fa43685d3a6704ccd8778a2a82b7c5c4aee4b47c54d3bcb_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:11caeb0f6c63f361d12e2c223aa0e1e363c79d8495a008f5b996184dfdd15d57_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:66b2f52b2abd9e3a1fcd1ef4aa926a0f8613730918a2b7743ce61d1ce9b103c7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:deefcb8674d1899581331ba7899baedb7f9c5355b2b3e4f11b5414b1ae58a8be_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:f980269a8879cd0dced67eec6e2ec9f708b347e4d49981fafccc6c795f73e4cf_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01853cca36a1042f42860bb89048c4a09de76b2cfac412fd78e38fd74376ca39_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:4970ca74fcbc6aaf9f64812f37e31426444d041345541d498b12a819cbe29299_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:527395e13fedf00d5ffa4a2c70602cab213ff9c826940a529150d6b1df4f7395_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b3ca415e883c09cf8f42f2b1b63ddf007fae7ac183f2185201efecf48489636e_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header"
    },
    {
      "cve": "CVE-2026-56852",
      "cwe": {
        "id": "CWE-835",
        "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
      },
      "discovery_date": "2026-07-21T20:01:56.266823+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:40c83c7127b6b90b9984b3c73b3cbad1c3a8f7af3dc792e5320d6defb9eb22e0_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5b4e3a421f13bd33d03185f4071b3e633767eb06a9875a02ca793d43fd1514c7_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:93e605c4231903b7a73e7578f8977a5c6029c767ab801f29b726d2e6ff290feb_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d9bc0d110bbc7b7ec8a2401f34cde12e470980086bb04fc532a9885917c06b7f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ee6505e36b31ecc38b080c2e56b7b26afd3c7db9b30d17947e6bcb6cf7f0e44e_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:15b1be865c1d4df2fd1171acb46922ba864555b18dfc71febd372e11a5d0eb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:55c2e8cbb4c7e89ed719c136d401c1fa49198e4a98a2dfe78c5eacb5ee2cadc8_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8d334ebdf403e2a15a664c1960044c6852f3e00b55ce2f2e808f6213ae70e00f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ceb52082d9002ba1762e6653bc39b4253f05a7cd58a42c664c7a658e6133a7e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:17a67ac2934041f996b19574bbeffa9e56d8486969785ae219215384cfd4162f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:18ea59f76a1ddd747712fbb3314f55cfdefb4e12a39ad9f0d22c26d25e8b04b4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1c687dff9904d440a9efefc95bd82ac1cf10df5c030ee8a3164621bc84e447fc_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:fad58cb6ca31afd96f8ef741cad73c4328c24361dfad022848c227f129c5b4b5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:21c630e1de77a6e18b0b774ebfc5ccef2191fef60da0c7914d0a81d5be236ea3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:51538cb4de3a2767509d5a7869f9a63a054416e7163c38714bce9bd83da1b619_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:902fe34ead11574878df61323db6ac53f3ad55d13d40f72b8d514ea0356e1a81_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bff77adab78f874b962324a9674157383dfe4570309d24c7b2a6acebead62a39_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2a0befa5c4dbcb56ef33f46ccdb27d5e02f8f5facdbf2fa0b9c6e6dd53a476e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:9ffa7e5a2ed3f92a6eb30792dc878add38b41f7ce5ca03a6f1a2c8b12300070a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a6a946b8e424db855be70e94c1cab3e5dcf56be8b5caec8d48b3b4579310a25a_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:de70e3309c799110feacba1b6d64bf153818e21790500da6ea75c05f276bedcd_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f49b88b70726cb222fa43685d3a6704ccd8778a2a82b7c5c4aee4b47c54d3bcb_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:11caeb0f6c63f361d12e2c223aa0e1e363c79d8495a008f5b996184dfdd15d57_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:66b2f52b2abd9e3a1fcd1ef4aa926a0f8613730918a2b7743ce61d1ce9b103c7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:deefcb8674d1899581331ba7899baedb7f9c5355b2b3e4f11b5414b1ae58a8be_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:f980269a8879cd0dced67eec6e2ec9f708b347e4d49981fafccc6c795f73e4cf_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01853cca36a1042f42860bb89048c4a09de76b2cfac412fd78e38fd74376ca39_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:4970ca74fcbc6aaf9f64812f37e31426444d041345541d498b12a819cbe29299_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:527395e13fedf00d5ffa4a2c70602cab213ff9c826940a529150d6b1df4f7395_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b3ca415e883c09cf8f42f2b1b63ddf007fae7ac183f2185201efecf48489636e_ppc64le"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2504233"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/text. The norm.Iter component can enter an infinite loop when processing input that contains invalid UTF-8 (Unicode Transformation Format - 8-bit) bytes. A remote attacker could exploit this vulnerability by providing specially crafted input, leading to a Denial of Service (DoS) condition where the affected application becomes unresponsive.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Important: This flaw in the `golang.org/x/text` library can lead to a denial of service. An attacker could provide specially crafted invalid UTF-8 input to an application using the affected `norm.Iter` functionality, causing it to enter an infinite loop and become unresponsive.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:01271821684bdb4791a1e757092e3799247ac91519f8516599c7cf9080407076_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:958178be4fc3798cdd531660e14514c370ac334b8a27a31a8f08db3244f17341_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:b881afc31c6e287608699dfc9d38bf38ff3616b2b133cc4726f0060ce99b16de_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:c237813ec28c79232f1f8d5bb2f875157323d10ddceddf3f722cd885c3c5c4d5_ppc64le"
        ],
        "known_not_affected": [
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:40c83c7127b6b90b9984b3c73b3cbad1c3a8f7af3dc792e5320d6defb9eb22e0_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5b4e3a421f13bd33d03185f4071b3e633767eb06a9875a02ca793d43fd1514c7_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:93e605c4231903b7a73e7578f8977a5c6029c767ab801f29b726d2e6ff290feb_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d9bc0d110bbc7b7ec8a2401f34cde12e470980086bb04fc532a9885917c06b7f_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ee6505e36b31ecc38b080c2e56b7b26afd3c7db9b30d17947e6bcb6cf7f0e44e_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:15b1be865c1d4df2fd1171acb46922ba864555b18dfc71febd372e11a5d0eb8e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:55c2e8cbb4c7e89ed719c136d401c1fa49198e4a98a2dfe78c5eacb5ee2cadc8_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8d334ebdf403e2a15a664c1960044c6852f3e00b55ce2f2e808f6213ae70e00f_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ceb52082d9002ba1762e6653bc39b4253f05a7cd58a42c664c7a658e6133a7e8_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:17a67ac2934041f996b19574bbeffa9e56d8486969785ae219215384cfd4162f_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:18ea59f76a1ddd747712fbb3314f55cfdefb4e12a39ad9f0d22c26d25e8b04b4_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1c687dff9904d440a9efefc95bd82ac1cf10df5c030ee8a3164621bc84e447fc_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:fad58cb6ca31afd96f8ef741cad73c4328c24361dfad022848c227f129c5b4b5_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:21c630e1de77a6e18b0b774ebfc5ccef2191fef60da0c7914d0a81d5be236ea3_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:51538cb4de3a2767509d5a7869f9a63a054416e7163c38714bce9bd83da1b619_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:902fe34ead11574878df61323db6ac53f3ad55d13d40f72b8d514ea0356e1a81_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bff77adab78f874b962324a9674157383dfe4570309d24c7b2a6acebead62a39_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2a0befa5c4dbcb56ef33f46ccdb27d5e02f8f5facdbf2fa0b9c6e6dd53a476e_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:9ffa7e5a2ed3f92a6eb30792dc878add38b41f7ce5ca03a6f1a2c8b12300070a_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a6a946b8e424db855be70e94c1cab3e5dcf56be8b5caec8d48b3b4579310a25a_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:de70e3309c799110feacba1b6d64bf153818e21790500da6ea75c05f276bedcd_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f49b88b70726cb222fa43685d3a6704ccd8778a2a82b7c5c4aee4b47c54d3bcb_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:11caeb0f6c63f361d12e2c223aa0e1e363c79d8495a008f5b996184dfdd15d57_ppc64le",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:66b2f52b2abd9e3a1fcd1ef4aa926a0f8613730918a2b7743ce61d1ce9b103c7_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:deefcb8674d1899581331ba7899baedb7f9c5355b2b3e4f11b5414b1ae58a8be_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:f980269a8879cd0dced67eec6e2ec9f708b347e4d49981fafccc6c795f73e4cf_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01853cca36a1042f42860bb89048c4a09de76b2cfac412fd78e38fd74376ca39_amd64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:4970ca74fcbc6aaf9f64812f37e31426444d041345541d498b12a819cbe29299_s390x",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:527395e13fedf00d5ffa4a2c70602cab213ff9c826940a529150d6b1df4f7395_arm64",
          "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b3ca415e883c09cf8f42f2b1b63ddf007fae7ac183f2185201efecf48489636e_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56852"
        },
        {
          "category": "external",
          "summary": "RHBZ#2504233",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2504233"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56852",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56852"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56852",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56852"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/794100",
          "url": "https://go.dev/cl/794100"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80142",
          "url": "https://go.dev/issue/80142"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5970",
          "url": "https://pkg.go.dev/vuln/GO-2026-5970"
        }
      ],
      "release_date": "2026-07-21T19:18:59.951000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-18T16:40:44+00:00",
          "details": "For OpenShift Container Platform 4.21 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/ocp-4-21-release-notes\n\nFor Red Hat OpenShift Logging 6.5, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.5",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:01271821684bdb4791a1e757092e3799247ac91519f8516599c7cf9080407076_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:958178be4fc3798cdd531660e14514c370ac334b8a27a31a8f08db3244f17341_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:b881afc31c6e287608699dfc9d38bf38ff3616b2b133cc4726f0060ce99b16de_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:c237813ec28c79232f1f8d5bb2f875157323d10ddceddf3f722cd885c3c5c4d5_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:56340"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:40c83c7127b6b90b9984b3c73b3cbad1c3a8f7af3dc792e5320d6defb9eb22e0_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5b4e3a421f13bd33d03185f4071b3e633767eb06a9875a02ca793d43fd1514c7_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:93e605c4231903b7a73e7578f8977a5c6029c767ab801f29b726d2e6ff290feb_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d9bc0d110bbc7b7ec8a2401f34cde12e470980086bb04fc532a9885917c06b7f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ee6505e36b31ecc38b080c2e56b7b26afd3c7db9b30d17947e6bcb6cf7f0e44e_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:01271821684bdb4791a1e757092e3799247ac91519f8516599c7cf9080407076_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:958178be4fc3798cdd531660e14514c370ac334b8a27a31a8f08db3244f17341_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:b881afc31c6e287608699dfc9d38bf38ff3616b2b133cc4726f0060ce99b16de_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:c237813ec28c79232f1f8d5bb2f875157323d10ddceddf3f722cd885c3c5c4d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:15b1be865c1d4df2fd1171acb46922ba864555b18dfc71febd372e11a5d0eb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:55c2e8cbb4c7e89ed719c136d401c1fa49198e4a98a2dfe78c5eacb5ee2cadc8_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8d334ebdf403e2a15a664c1960044c6852f3e00b55ce2f2e808f6213ae70e00f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ceb52082d9002ba1762e6653bc39b4253f05a7cd58a42c664c7a658e6133a7e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:17a67ac2934041f996b19574bbeffa9e56d8486969785ae219215384cfd4162f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:18ea59f76a1ddd747712fbb3314f55cfdefb4e12a39ad9f0d22c26d25e8b04b4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1c687dff9904d440a9efefc95bd82ac1cf10df5c030ee8a3164621bc84e447fc_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:fad58cb6ca31afd96f8ef741cad73c4328c24361dfad022848c227f129c5b4b5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:21c630e1de77a6e18b0b774ebfc5ccef2191fef60da0c7914d0a81d5be236ea3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:51538cb4de3a2767509d5a7869f9a63a054416e7163c38714bce9bd83da1b619_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:902fe34ead11574878df61323db6ac53f3ad55d13d40f72b8d514ea0356e1a81_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bff77adab78f874b962324a9674157383dfe4570309d24c7b2a6acebead62a39_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2a0befa5c4dbcb56ef33f46ccdb27d5e02f8f5facdbf2fa0b9c6e6dd53a476e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:9ffa7e5a2ed3f92a6eb30792dc878add38b41f7ce5ca03a6f1a2c8b12300070a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a6a946b8e424db855be70e94c1cab3e5dcf56be8b5caec8d48b3b4579310a25a_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:de70e3309c799110feacba1b6d64bf153818e21790500da6ea75c05f276bedcd_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f49b88b70726cb222fa43685d3a6704ccd8778a2a82b7c5c4aee4b47c54d3bcb_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:11caeb0f6c63f361d12e2c223aa0e1e363c79d8495a008f5b996184dfdd15d57_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:66b2f52b2abd9e3a1fcd1ef4aa926a0f8613730918a2b7743ce61d1ce9b103c7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:deefcb8674d1899581331ba7899baedb7f9c5355b2b3e4f11b5414b1ae58a8be_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:f980269a8879cd0dced67eec6e2ec9f708b347e4d49981fafccc6c795f73e4cf_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01853cca36a1042f42860bb89048c4a09de76b2cfac412fd78e38fd74376ca39_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:4970ca74fcbc6aaf9f64812f37e31426444d041345541d498b12a819cbe29299_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:527395e13fedf00d5ffa4a2c70602cab213ff9c826940a529150d6b1df4f7395_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b3ca415e883c09cf8f42f2b1b63ddf007fae7ac183f2185201efecf48489636e_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:40c83c7127b6b90b9984b3c73b3cbad1c3a8f7af3dc792e5320d6defb9eb22e0_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5b4e3a421f13bd33d03185f4071b3e633767eb06a9875a02ca793d43fd1514c7_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:93e605c4231903b7a73e7578f8977a5c6029c767ab801f29b726d2e6ff290feb_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d9bc0d110bbc7b7ec8a2401f34cde12e470980086bb04fc532a9885917c06b7f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ee6505e36b31ecc38b080c2e56b7b26afd3c7db9b30d17947e6bcb6cf7f0e44e_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:01271821684bdb4791a1e757092e3799247ac91519f8516599c7cf9080407076_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:958178be4fc3798cdd531660e14514c370ac334b8a27a31a8f08db3244f17341_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:b881afc31c6e287608699dfc9d38bf38ff3616b2b133cc4726f0060ce99b16de_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:c237813ec28c79232f1f8d5bb2f875157323d10ddceddf3f722cd885c3c5c4d5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:15b1be865c1d4df2fd1171acb46922ba864555b18dfc71febd372e11a5d0eb8e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:55c2e8cbb4c7e89ed719c136d401c1fa49198e4a98a2dfe78c5eacb5ee2cadc8_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8d334ebdf403e2a15a664c1960044c6852f3e00b55ce2f2e808f6213ae70e00f_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ceb52082d9002ba1762e6653bc39b4253f05a7cd58a42c664c7a658e6133a7e8_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:17a67ac2934041f996b19574bbeffa9e56d8486969785ae219215384cfd4162f_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:18ea59f76a1ddd747712fbb3314f55cfdefb4e12a39ad9f0d22c26d25e8b04b4_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1c687dff9904d440a9efefc95bd82ac1cf10df5c030ee8a3164621bc84e447fc_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:fad58cb6ca31afd96f8ef741cad73c4328c24361dfad022848c227f129c5b4b5_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:21c630e1de77a6e18b0b774ebfc5ccef2191fef60da0c7914d0a81d5be236ea3_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:51538cb4de3a2767509d5a7869f9a63a054416e7163c38714bce9bd83da1b619_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:902fe34ead11574878df61323db6ac53f3ad55d13d40f72b8d514ea0356e1a81_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bff77adab78f874b962324a9674157383dfe4570309d24c7b2a6acebead62a39_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2a0befa5c4dbcb56ef33f46ccdb27d5e02f8f5facdbf2fa0b9c6e6dd53a476e_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:9ffa7e5a2ed3f92a6eb30792dc878add38b41f7ce5ca03a6f1a2c8b12300070a_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a6a946b8e424db855be70e94c1cab3e5dcf56be8b5caec8d48b3b4579310a25a_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:de70e3309c799110feacba1b6d64bf153818e21790500da6ea75c05f276bedcd_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f49b88b70726cb222fa43685d3a6704ccd8778a2a82b7c5c4aee4b47c54d3bcb_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:11caeb0f6c63f361d12e2c223aa0e1e363c79d8495a008f5b996184dfdd15d57_ppc64le",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:66b2f52b2abd9e3a1fcd1ef4aa926a0f8613730918a2b7743ce61d1ce9b103c7_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:deefcb8674d1899581331ba7899baedb7f9c5355b2b3e4f11b5414b1ae58a8be_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:f980269a8879cd0dced67eec6e2ec9f708b347e4d49981fafccc6c795f73e4cf_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01853cca36a1042f42860bb89048c4a09de76b2cfac412fd78e38fd74376ca39_amd64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:4970ca74fcbc6aaf9f64812f37e31426444d041345541d498b12a819cbe29299_s390x",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:527395e13fedf00d5ffa4a2c70602cab213ff9c826940a529150d6b1df4f7395_arm64",
            "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b3ca415e883c09cf8f42f2b1b63ddf007fae7ac183f2185201efecf48489636e_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input"
    }
  ]
}