RHSA-2026:77639
Vulnerability from csaf_redhat - Published: 2026-10-07 13:52 - Updated: 2026-10-09 13:32Summary
Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.4.7
Severity
Important
Notes
Topic: Logging for Red Hat OpenShift - 6.4.7
Details: Red Hat OpenShift Logging 6.4.7 is a cluster-wide logging solution for OpenShift that collects and manages applications, infrastructure, and audit logs.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in OpenTelemetry-Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by sending oversized or invalid baggage headers. The `Parse` function, in affected versions, failed to reject raw-length inputs, leading to excessive processing and error logging when handling these large inputs.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:07ea5a2c3d6a85f2d9b4db461f6d0709e9b041a2478480ab807803970386660d_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:899870404d2aab5cc3ef06159f1c3fea6ea11a76d3fb6c266a28881a57a84af8_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:cfe363b8dcd6f87cb6ff16fb1deab90539ec611712ed47fa1cd796e38ffa7dac_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ec0a79d78677c143d5bf08ba24ce87e06b97a4b29df721276170cfd3ccd443d3_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:26b899f654e17f0e6fae80859a4455efed141a5db62a9fde2dd1ffcb57eda396_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:2c2c98561106ba1395ef994d0168860e8d5c0a16ffcb2bbaf9de30afd2daaee9_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6ff7218557873037213de9174025674529cfd4d476e2214251a4e6698fbede7b_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8b4bf1cf4db332afaaacf4d6e8e02d3dd3257c6d3964f1d1de63acab62bfa282_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3644b09eff92d9406079df144b8083633c0218c3efa48d2411a1b18627b5e9d2_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3a74f0ebba75ca491bd357a8f5d2e02e6b18508cbf426253e4654cfc1530183d_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b1c4331b5b8b0eee432af830a11f6cf43d9699d790d09c011b2b1a02007ca13_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b18585062c47e8ff7cd973bfb0faa920aa85608501e952e7b053d4ebb337bdd4_amd64 | — |
Vendor Fix
fix
|
Known not affected
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:5867a6765408efba2f8a4a5f06a7cf3a108b7144074681d437254f88cdf8d904_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0cdf057b90ab1a06b114c1d7eb684beac325e947187245757e600cf6c8d695ea_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:1ceb575d48c09b784ca8ec3b90154344f88e62aa3c737223e57f820b1eae93f8_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:229cc5581673229756c23afed9faca1af773aabbe714995471dc0b0675ec5109_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:85ce6360373096dae5338fd372359d186457b583b8c403b84741f59ac2e926d9_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2ba6fef395812b97c1ca3bdc812550b84008d8a0222b2a0232800d9420e0742a_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:51825481204047d89d21c390c369f60c2d7c6f90d1b9688b249eef79ec8308be_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a2b5a0c0323b844fcdc09360603c6f2f263cd391c012461de71a951cec39bd0b_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a5cdae5033367bd2dfb2afe58b141eb3b081efc8ff08a92ee7baae9493673eae_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6e05aaa40d8030f2d03959c5b828da2d6630d770052fb780f1493c7f0f127cf3_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8f92a06f20fece433448c93d337f648dda47340114ab62076b604134b7dbfc03_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9dcf615c12e91f47b951ce8d231a1a81231ecee294e88d926890bedd6e2546d_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:f1ceed7fbc7bffbf4799ebef749fae87bcf1acb265367299bbd771f94198301f_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:140282663fbcf4c0bc14fd5928cb5b5bf395f152e0bccea6c024daec038cb1eb_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:762b5776f1b31474e4052204e7fe7dce35b44dc8756b9d4078554d7a2c0ad6af_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c21fc4fc18a3cd7bac6ef26b1ea5678277e768eb0df9a1e9567396cad4290ebc_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c90304afb7cd803c1fc0749696850360899e705ff3ce5fd8bd1228135412d6a8_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:cdc2c9394d14cae8bb2d81dc02643f5463045e03b7ec93951146ca8b116905e9_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0774da44a434d44ae01937e7cd09474e835ea66d7bf4e3e600c54718ff90d41b_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3688f9448ea2ce01c3ec0c1d5b9e8644300c138ef5fd1c94459b5c00b97cf58c_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:415e888a82f18c127c327a5d267d058c35687cba4aa49b340770de9a2d03b335_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:89456745024875f12623aef30fdb27d712c23d1025ca3ee4c79ebfb9af77f2a4_amd64 | — |
Threats
Impact
Important
A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.
7.5 (High)
Affected products
Fixed
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:07ea5a2c3d6a85f2d9b4db461f6d0709e9b041a2478480ab807803970386660d_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:899870404d2aab5cc3ef06159f1c3fea6ea11a76d3fb6c266a28881a57a84af8_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:cfe363b8dcd6f87cb6ff16fb1deab90539ec611712ed47fa1cd796e38ffa7dac_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ec0a79d78677c143d5bf08ba24ce87e06b97a4b29df721276170cfd3ccd443d3_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:26b899f654e17f0e6fae80859a4455efed141a5db62a9fde2dd1ffcb57eda396_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:2c2c98561106ba1395ef994d0168860e8d5c0a16ffcb2bbaf9de30afd2daaee9_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6ff7218557873037213de9174025674529cfd4d476e2214251a4e6698fbede7b_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8b4bf1cf4db332afaaacf4d6e8e02d3dd3257c6d3964f1d1de63acab62bfa282_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3644b09eff92d9406079df144b8083633c0218c3efa48d2411a1b18627b5e9d2_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3a74f0ebba75ca491bd357a8f5d2e02e6b18508cbf426253e4654cfc1530183d_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b1c4331b5b8b0eee432af830a11f6cf43d9699d790d09c011b2b1a02007ca13_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b18585062c47e8ff7cd973bfb0faa920aa85608501e952e7b053d4ebb337bdd4_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:762b5776f1b31474e4052204e7fe7dce35b44dc8756b9d4078554d7a2c0ad6af_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c21fc4fc18a3cd7bac6ef26b1ea5678277e768eb0df9a1e9567396cad4290ebc_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c90304afb7cd803c1fc0749696850360899e705ff3ce5fd8bd1228135412d6a8_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:cdc2c9394d14cae8bb2d81dc02643f5463045e03b7ec93951146ca8b116905e9_amd64 | — |
Vendor Fix
fix
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:5867a6765408efba2f8a4a5f06a7cf3a108b7144074681d437254f88cdf8d904_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0cdf057b90ab1a06b114c1d7eb684beac325e947187245757e600cf6c8d695ea_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:1ceb575d48c09b784ca8ec3b90154344f88e62aa3c737223e57f820b1eae93f8_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:229cc5581673229756c23afed9faca1af773aabbe714995471dc0b0675ec5109_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:85ce6360373096dae5338fd372359d186457b583b8c403b84741f59ac2e926d9_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2ba6fef395812b97c1ca3bdc812550b84008d8a0222b2a0232800d9420e0742a_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:51825481204047d89d21c390c369f60c2d7c6f90d1b9688b249eef79ec8308be_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a2b5a0c0323b844fcdc09360603c6f2f263cd391c012461de71a951cec39bd0b_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a5cdae5033367bd2dfb2afe58b141eb3b081efc8ff08a92ee7baae9493673eae_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6e05aaa40d8030f2d03959c5b828da2d6630d770052fb780f1493c7f0f127cf3_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8f92a06f20fece433448c93d337f648dda47340114ab62076b604134b7dbfc03_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9dcf615c12e91f47b951ce8d231a1a81231ecee294e88d926890bedd6e2546d_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:f1ceed7fbc7bffbf4799ebef749fae87bcf1acb265367299bbd771f94198301f_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:140282663fbcf4c0bc14fd5928cb5b5bf395f152e0bccea6c024daec038cb1eb_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0774da44a434d44ae01937e7cd09474e835ea66d7bf4e3e600c54718ff90d41b_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3688f9448ea2ce01c3ec0c1d5b9e8644300c138ef5fd1c94459b5c00b97cf58c_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:415e888a82f18c127c327a5d267d058c35687cba4aa49b340770de9a2d03b335_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:89456745024875f12623aef30fdb27d712c23d1025ca3ee4c79ebfb9af77f2a4_amd64 | — |
Threats
Impact
Important
A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:26b899f654e17f0e6fae80859a4455efed141a5db62a9fde2dd1ffcb57eda396_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:2c2c98561106ba1395ef994d0168860e8d5c0a16ffcb2bbaf9de30afd2daaee9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6ff7218557873037213de9174025674529cfd4d476e2214251a4e6698fbede7b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8b4bf1cf4db332afaaacf4d6e8e02d3dd3257c6d3964f1d1de63acab62bfa282_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3644b09eff92d9406079df144b8083633c0218c3efa48d2411a1b18627b5e9d2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3a74f0ebba75ca491bd357a8f5d2e02e6b18508cbf426253e4654cfc1530183d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b1c4331b5b8b0eee432af830a11f6cf43d9699d790d09c011b2b1a02007ca13_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b18585062c47e8ff7cd973bfb0faa920aa85608501e952e7b053d4ebb337bdd4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:762b5776f1b31474e4052204e7fe7dce35b44dc8756b9d4078554d7a2c0ad6af_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c21fc4fc18a3cd7bac6ef26b1ea5678277e768eb0df9a1e9567396cad4290ebc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c90304afb7cd803c1fc0749696850360899e705ff3ce5fd8bd1228135412d6a8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:cdc2c9394d14cae8bb2d81dc02643f5463045e03b7ec93951146ca8b116905e9_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:5867a6765408efba2f8a4a5f06a7cf3a108b7144074681d437254f88cdf8d904_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0cdf057b90ab1a06b114c1d7eb684beac325e947187245757e600cf6c8d695ea_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:1ceb575d48c09b784ca8ec3b90154344f88e62aa3c737223e57f820b1eae93f8_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:229cc5581673229756c23afed9faca1af773aabbe714995471dc0b0675ec5109_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:85ce6360373096dae5338fd372359d186457b583b8c403b84741f59ac2e926d9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2ba6fef395812b97c1ca3bdc812550b84008d8a0222b2a0232800d9420e0742a_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:51825481204047d89d21c390c369f60c2d7c6f90d1b9688b249eef79ec8308be_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a2b5a0c0323b844fcdc09360603c6f2f263cd391c012461de71a951cec39bd0b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a5cdae5033367bd2dfb2afe58b141eb3b081efc8ff08a92ee7baae9493673eae_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6e05aaa40d8030f2d03959c5b828da2d6630d770052fb780f1493c7f0f127cf3_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8f92a06f20fece433448c93d337f648dda47340114ab62076b604134b7dbfc03_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9dcf615c12e91f47b951ce8d231a1a81231ecee294e88d926890bedd6e2546d_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:f1ceed7fbc7bffbf4799ebef749fae87bcf1acb265367299bbd771f94198301f_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:07ea5a2c3d6a85f2d9b4db461f6d0709e9b041a2478480ab807803970386660d_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:899870404d2aab5cc3ef06159f1c3fea6ea11a76d3fb6c266a28881a57a84af8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:cfe363b8dcd6f87cb6ff16fb1deab90539ec611712ed47fa1cd796e38ffa7dac_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ec0a79d78677c143d5bf08ba24ce87e06b97a4b29df721276170cfd3ccd443d3_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:140282663fbcf4c0bc14fd5928cb5b5bf395f152e0bccea6c024daec038cb1eb_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0774da44a434d44ae01937e7cd09474e835ea66d7bf4e3e600c54718ff90d41b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3688f9448ea2ce01c3ec0c1d5b9e8644300c138ef5fd1c94459b5c00b97cf58c_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:415e888a82f18c127c327a5d267d058c35687cba4aa49b340770de9a2d03b335_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:89456745024875f12623aef30fdb27d712c23d1025ca3ee4c79ebfb9af77f2a4_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. This vulnerability allows an attacker to manipulate how HTML is processed and displayed. By providing specially crafted HTML, an attacker can cause an unexpected structure in the rendered output. This can lead to Cross-Site Scripting (XSS) attacks, where malicious scripts are executed in a user's web browser, potentially compromising user data or taking control of their session.
6.1 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:07ea5a2c3d6a85f2d9b4db461f6d0709e9b041a2478480ab807803970386660d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:899870404d2aab5cc3ef06159f1c3fea6ea11a76d3fb6c266a28881a57a84af8_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:cfe363b8dcd6f87cb6ff16fb1deab90539ec611712ed47fa1cd796e38ffa7dac_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ec0a79d78677c143d5bf08ba24ce87e06b97a4b29df721276170cfd3ccd443d3_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:5867a6765408efba2f8a4a5f06a7cf3a108b7144074681d437254f88cdf8d904_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0cdf057b90ab1a06b114c1d7eb684beac325e947187245757e600cf6c8d695ea_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:1ceb575d48c09b784ca8ec3b90154344f88e62aa3c737223e57f820b1eae93f8_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:229cc5581673229756c23afed9faca1af773aabbe714995471dc0b0675ec5109_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:85ce6360373096dae5338fd372359d186457b583b8c403b84741f59ac2e926d9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2ba6fef395812b97c1ca3bdc812550b84008d8a0222b2a0232800d9420e0742a_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:51825481204047d89d21c390c369f60c2d7c6f90d1b9688b249eef79ec8308be_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a2b5a0c0323b844fcdc09360603c6f2f263cd391c012461de71a951cec39bd0b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a5cdae5033367bd2dfb2afe58b141eb3b081efc8ff08a92ee7baae9493673eae_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6e05aaa40d8030f2d03959c5b828da2d6630d770052fb780f1493c7f0f127cf3_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8f92a06f20fece433448c93d337f648dda47340114ab62076b604134b7dbfc03_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9dcf615c12e91f47b951ce8d231a1a81231ecee294e88d926890bedd6e2546d_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:f1ceed7fbc7bffbf4799ebef749fae87bcf1acb265367299bbd771f94198301f_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:140282663fbcf4c0bc14fd5928cb5b5bf395f152e0bccea6c024daec038cb1eb_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:26b899f654e17f0e6fae80859a4455efed141a5db62a9fde2dd1ffcb57eda396_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:2c2c98561106ba1395ef994d0168860e8d5c0a16ffcb2bbaf9de30afd2daaee9_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6ff7218557873037213de9174025674529cfd4d476e2214251a4e6698fbede7b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8b4bf1cf4db332afaaacf4d6e8e02d3dd3257c6d3964f1d1de63acab62bfa282_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3644b09eff92d9406079df144b8083633c0218c3efa48d2411a1b18627b5e9d2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3a74f0ebba75ca491bd357a8f5d2e02e6b18508cbf426253e4654cfc1530183d_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b1c4331b5b8b0eee432af830a11f6cf43d9699d790d09c011b2b1a02007ca13_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b18585062c47e8ff7cd973bfb0faa920aa85608501e952e7b053d4ebb337bdd4_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:762b5776f1b31474e4052204e7fe7dce35b44dc8756b9d4078554d7a2c0ad6af_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c21fc4fc18a3cd7bac6ef26b1ea5678277e768eb0df9a1e9567396cad4290ebc_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c90304afb7cd803c1fc0749696850360899e705ff3ce5fd8bd1228135412d6a8_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:cdc2c9394d14cae8bb2d81dc02643f5463045e03b7ec93951146ca8b116905e9_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0774da44a434d44ae01937e7cd09474e835ea66d7bf4e3e600c54718ff90d41b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3688f9448ea2ce01c3ec0c1d5b9e8644300c138ef5fd1c94459b5c00b97cf58c_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:415e888a82f18c127c327a5d267d058c35687cba4aa49b340770de9a2d03b335_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:89456745024875f12623aef30fdb27d712c23d1025ca3ee4c79ebfb9af77f2a4_amd64 | — |
Workaround
|
Threats
Impact
Moderate
References
37 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Logging for Red Hat OpenShift - 6.4.7",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat OpenShift Logging 6.4.7 is a cluster-wide logging solution for OpenShift that collects and manages applications, infrastructure, and audit logs.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:77639",
"url": "https://access.redhat.com/errata/RHSA-2026:77639"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-41178",
"url": "https://access.redhat.com/security/cve/CVE-2026-41178"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42151",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42154",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42502",
"url": "https://access.redhat.com/security/cve/CVE-2026-42502"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_77639.json"
}
],
"title": "Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.4.7",
"tracking": {
"current_release_date": "2026-10-09T13:32:36+00:00",
"generator": {
"date": "2026-10-09T13:32:36+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.2"
}
},
"id": "RHSA-2026:77639",
"initial_release_date": "2026-10-07T13:52:35+00:00",
"revision_history": [
{
"date": "2026-10-07T13:52:35+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-10-07T13:52:37+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-10-09T13:32:36+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Logging Subsystem for Red Hat OpenShift 6.4",
"product": {
"name": "Logging Subsystem for Red Hat OpenShift 6.4",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.4",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:logging:6.4::el9"
}
}
}
],
"category": "product_family",
"name": "Logging Subsystem for Red Hat OpenShift"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:1ceb575d48c09b784ca8ec3b90154344f88e62aa3c737223e57f820b1eae93f8_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:1ceb575d48c09b784ca8ec3b90154344f88e62aa3c737223e57f820b1eae93f8_amd64",
"product_id": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:1ceb575d48c09b784ca8ec3b90154344f88e62aa3c737223e57f820b1eae93f8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-logging-rhel9-operator@sha256%3A1ceb575d48c09b784ca8ec3b90154344f88e62aa3c737223e57f820b1eae93f8?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator\u0026tag=1790704484"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:5867a6765408efba2f8a4a5f06a7cf3a108b7144074681d437254f88cdf8d904_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:5867a6765408efba2f8a4a5f06a7cf3a108b7144074681d437254f88cdf8d904_amd64",
"product_id": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:5867a6765408efba2f8a4a5f06a7cf3a108b7144074681d437254f88cdf8d904_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-logging-operator-bundle@sha256%3A5867a6765408efba2f8a4a5f06a7cf3a108b7144074681d437254f88cdf8d904?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-operator-bundle\u0026tag=1790708346"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:51825481204047d89d21c390c369f60c2d7c6f90d1b9688b249eef79ec8308be_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:51825481204047d89d21c390c369f60c2d7c6f90d1b9688b249eef79ec8308be_amd64",
"product_id": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:51825481204047d89d21c390c369f60c2d7c6f90d1b9688b249eef79ec8308be_amd64",
"product_identification_helper": {
"purl": "pkg:oci/eventrouter-rhel9@sha256%3A51825481204047d89d21c390c369f60c2d7c6f90d1b9688b249eef79ec8308be?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel9\u0026tag=1790704438"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6e05aaa40d8030f2d03959c5b828da2d6630d770052fb780f1493c7f0f127cf3_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6e05aaa40d8030f2d03959c5b828da2d6630d770052fb780f1493c7f0f127cf3_amd64",
"product_id": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6e05aaa40d8030f2d03959c5b828da2d6630d770052fb780f1493c7f0f127cf3_amd64",
"product_identification_helper": {
"purl": "pkg:oci/log-file-metric-exporter-rhel9@sha256%3A6e05aaa40d8030f2d03959c5b828da2d6630d770052fb780f1493c7f0f127cf3?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9\u0026tag=1790704414"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:cfe363b8dcd6f87cb6ff16fb1deab90539ec611712ed47fa1cd796e38ffa7dac_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:cfe363b8dcd6f87cb6ff16fb1deab90539ec611712ed47fa1cd796e38ffa7dac_amd64",
"product_id": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:cfe363b8dcd6f87cb6ff16fb1deab90539ec611712ed47fa1cd796e38ffa7dac_amd64",
"product_identification_helper": {
"purl": "pkg:oci/logging-loki-rhel9@sha256%3Acfe363b8dcd6f87cb6ff16fb1deab90539ec611712ed47fa1cd796e38ffa7dac?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/logging-loki-rhel9\u0026tag=1790704601"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:2c2c98561106ba1395ef994d0168860e8d5c0a16ffcb2bbaf9de30afd2daaee9_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:2c2c98561106ba1395ef994d0168860e8d5c0a16ffcb2bbaf9de30afd2daaee9_amd64",
"product_id": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:2c2c98561106ba1395ef994d0168860e8d5c0a16ffcb2bbaf9de30afd2daaee9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/loki-rhel9-operator@sha256%3A2c2c98561106ba1395ef994d0168860e8d5c0a16ffcb2bbaf9de30afd2daaee9?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/loki-rhel9-operator\u0026tag=1790704426"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:140282663fbcf4c0bc14fd5928cb5b5bf395f152e0bccea6c024daec038cb1eb_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:140282663fbcf4c0bc14fd5928cb5b5bf395f152e0bccea6c024daec038cb1eb_amd64",
"product_id": "registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:140282663fbcf4c0bc14fd5928cb5b5bf395f152e0bccea6c024daec038cb1eb_amd64",
"product_identification_helper": {
"purl": "pkg:oci/loki-operator-bundle@sha256%3A140282663fbcf4c0bc14fd5928cb5b5bf395f152e0bccea6c024daec038cb1eb?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/loki-operator-bundle\u0026tag=1790708348"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b18585062c47e8ff7cd973bfb0faa920aa85608501e952e7b053d4ebb337bdd4_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b18585062c47e8ff7cd973bfb0faa920aa85608501e952e7b053d4ebb337bdd4_amd64",
"product_id": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b18585062c47e8ff7cd973bfb0faa920aa85608501e952e7b053d4ebb337bdd4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/lokistack-gateway-rhel9@sha256%3Ab18585062c47e8ff7cd973bfb0faa920aa85608501e952e7b053d4ebb337bdd4?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/lokistack-gateway-rhel9\u0026tag=1790704519"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:cdc2c9394d14cae8bb2d81dc02643f5463045e03b7ec93951146ca8b116905e9_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:cdc2c9394d14cae8bb2d81dc02643f5463045e03b7ec93951146ca8b116905e9_amd64",
"product_id": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:cdc2c9394d14cae8bb2d81dc02643f5463045e03b7ec93951146ca8b116905e9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/opa-openshift-rhel9@sha256%3Acdc2c9394d14cae8bb2d81dc02643f5463045e03b7ec93951146ca8b116905e9?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/opa-openshift-rhel9\u0026tag=1790704462"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:89456745024875f12623aef30fdb27d712c23d1025ca3ee4c79ebfb9af77f2a4_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:89456745024875f12623aef30fdb27d712c23d1025ca3ee4c79ebfb9af77f2a4_amd64",
"product_id": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:89456745024875f12623aef30fdb27d712c23d1025ca3ee4c79ebfb9af77f2a4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/vector-rhel9@sha256%3A89456745024875f12623aef30fdb27d712c23d1025ca3ee4c79ebfb9af77f2a4?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/vector-rhel9\u0026tag=1790704889"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:229cc5581673229756c23afed9faca1af773aabbe714995471dc0b0675ec5109_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:229cc5581673229756c23afed9faca1af773aabbe714995471dc0b0675ec5109_arm64",
"product_id": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:229cc5581673229756c23afed9faca1af773aabbe714995471dc0b0675ec5109_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-logging-rhel9-operator@sha256%3A229cc5581673229756c23afed9faca1af773aabbe714995471dc0b0675ec5109?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator\u0026tag=1790704484"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2ba6fef395812b97c1ca3bdc812550b84008d8a0222b2a0232800d9420e0742a_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2ba6fef395812b97c1ca3bdc812550b84008d8a0222b2a0232800d9420e0742a_arm64",
"product_id": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2ba6fef395812b97c1ca3bdc812550b84008d8a0222b2a0232800d9420e0742a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/eventrouter-rhel9@sha256%3A2ba6fef395812b97c1ca3bdc812550b84008d8a0222b2a0232800d9420e0742a?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel9\u0026tag=1790704438"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9dcf615c12e91f47b951ce8d231a1a81231ecee294e88d926890bedd6e2546d_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9dcf615c12e91f47b951ce8d231a1a81231ecee294e88d926890bedd6e2546d_arm64",
"product_id": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9dcf615c12e91f47b951ce8d231a1a81231ecee294e88d926890bedd6e2546d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/log-file-metric-exporter-rhel9@sha256%3Ae9dcf615c12e91f47b951ce8d231a1a81231ecee294e88d926890bedd6e2546d?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9\u0026tag=1790704414"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:07ea5a2c3d6a85f2d9b4db461f6d0709e9b041a2478480ab807803970386660d_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:07ea5a2c3d6a85f2d9b4db461f6d0709e9b041a2478480ab807803970386660d_arm64",
"product_id": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:07ea5a2c3d6a85f2d9b4db461f6d0709e9b041a2478480ab807803970386660d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/logging-loki-rhel9@sha256%3A07ea5a2c3d6a85f2d9b4db461f6d0709e9b041a2478480ab807803970386660d?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/logging-loki-rhel9\u0026tag=1790704601"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8b4bf1cf4db332afaaacf4d6e8e02d3dd3257c6d3964f1d1de63acab62bfa282_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8b4bf1cf4db332afaaacf4d6e8e02d3dd3257c6d3964f1d1de63acab62bfa282_arm64",
"product_id": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8b4bf1cf4db332afaaacf4d6e8e02d3dd3257c6d3964f1d1de63acab62bfa282_arm64",
"product_identification_helper": {
"purl": "pkg:oci/loki-rhel9-operator@sha256%3A8b4bf1cf4db332afaaacf4d6e8e02d3dd3257c6d3964f1d1de63acab62bfa282?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/loki-rhel9-operator\u0026tag=1790704426"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b1c4331b5b8b0eee432af830a11f6cf43d9699d790d09c011b2b1a02007ca13_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b1c4331b5b8b0eee432af830a11f6cf43d9699d790d09c011b2b1a02007ca13_arm64",
"product_id": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b1c4331b5b8b0eee432af830a11f6cf43d9699d790d09c011b2b1a02007ca13_arm64",
"product_identification_helper": {
"purl": "pkg:oci/lokistack-gateway-rhel9@sha256%3A8b1c4331b5b8b0eee432af830a11f6cf43d9699d790d09c011b2b1a02007ca13?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/lokistack-gateway-rhel9\u0026tag=1790704519"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c90304afb7cd803c1fc0749696850360899e705ff3ce5fd8bd1228135412d6a8_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c90304afb7cd803c1fc0749696850360899e705ff3ce5fd8bd1228135412d6a8_arm64",
"product_id": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c90304afb7cd803c1fc0749696850360899e705ff3ce5fd8bd1228135412d6a8_arm64",
"product_identification_helper": {
"purl": "pkg:oci/opa-openshift-rhel9@sha256%3Ac90304afb7cd803c1fc0749696850360899e705ff3ce5fd8bd1228135412d6a8?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/opa-openshift-rhel9\u0026tag=1790704462"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:415e888a82f18c127c327a5d267d058c35687cba4aa49b340770de9a2d03b335_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:415e888a82f18c127c327a5d267d058c35687cba4aa49b340770de9a2d03b335_arm64",
"product_id": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:415e888a82f18c127c327a5d267d058c35687cba4aa49b340770de9a2d03b335_arm64",
"product_identification_helper": {
"purl": "pkg:oci/vector-rhel9@sha256%3A415e888a82f18c127c327a5d267d058c35687cba4aa49b340770de9a2d03b335?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/vector-rhel9\u0026tag=1790704889"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:85ce6360373096dae5338fd372359d186457b583b8c403b84741f59ac2e926d9_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:85ce6360373096dae5338fd372359d186457b583b8c403b84741f59ac2e926d9_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:85ce6360373096dae5338fd372359d186457b583b8c403b84741f59ac2e926d9_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-logging-rhel9-operator@sha256%3A85ce6360373096dae5338fd372359d186457b583b8c403b84741f59ac2e926d9?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator\u0026tag=1790704484"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a2b5a0c0323b844fcdc09360603c6f2f263cd391c012461de71a951cec39bd0b_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a2b5a0c0323b844fcdc09360603c6f2f263cd391c012461de71a951cec39bd0b_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a2b5a0c0323b844fcdc09360603c6f2f263cd391c012461de71a951cec39bd0b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/eventrouter-rhel9@sha256%3Aa2b5a0c0323b844fcdc09360603c6f2f263cd391c012461de71a951cec39bd0b?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel9\u0026tag=1790704438"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8f92a06f20fece433448c93d337f648dda47340114ab62076b604134b7dbfc03_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8f92a06f20fece433448c93d337f648dda47340114ab62076b604134b7dbfc03_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8f92a06f20fece433448c93d337f648dda47340114ab62076b604134b7dbfc03_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/log-file-metric-exporter-rhel9@sha256%3A8f92a06f20fece433448c93d337f648dda47340114ab62076b604134b7dbfc03?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9\u0026tag=1790704414"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:899870404d2aab5cc3ef06159f1c3fea6ea11a76d3fb6c266a28881a57a84af8_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:899870404d2aab5cc3ef06159f1c3fea6ea11a76d3fb6c266a28881a57a84af8_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:899870404d2aab5cc3ef06159f1c3fea6ea11a76d3fb6c266a28881a57a84af8_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/logging-loki-rhel9@sha256%3A899870404d2aab5cc3ef06159f1c3fea6ea11a76d3fb6c266a28881a57a84af8?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/logging-loki-rhel9\u0026tag=1790704601"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6ff7218557873037213de9174025674529cfd4d476e2214251a4e6698fbede7b_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6ff7218557873037213de9174025674529cfd4d476e2214251a4e6698fbede7b_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6ff7218557873037213de9174025674529cfd4d476e2214251a4e6698fbede7b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/loki-rhel9-operator@sha256%3A6ff7218557873037213de9174025674529cfd4d476e2214251a4e6698fbede7b?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/loki-rhel9-operator\u0026tag=1790704426"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3644b09eff92d9406079df144b8083633c0218c3efa48d2411a1b18627b5e9d2_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3644b09eff92d9406079df144b8083633c0218c3efa48d2411a1b18627b5e9d2_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3644b09eff92d9406079df144b8083633c0218c3efa48d2411a1b18627b5e9d2_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/lokistack-gateway-rhel9@sha256%3A3644b09eff92d9406079df144b8083633c0218c3efa48d2411a1b18627b5e9d2?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/lokistack-gateway-rhel9\u0026tag=1790704519"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c21fc4fc18a3cd7bac6ef26b1ea5678277e768eb0df9a1e9567396cad4290ebc_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c21fc4fc18a3cd7bac6ef26b1ea5678277e768eb0df9a1e9567396cad4290ebc_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c21fc4fc18a3cd7bac6ef26b1ea5678277e768eb0df9a1e9567396cad4290ebc_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/opa-openshift-rhel9@sha256%3Ac21fc4fc18a3cd7bac6ef26b1ea5678277e768eb0df9a1e9567396cad4290ebc?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/opa-openshift-rhel9\u0026tag=1790704462"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:0774da44a434d44ae01937e7cd09474e835ea66d7bf4e3e600c54718ff90d41b_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:0774da44a434d44ae01937e7cd09474e835ea66d7bf4e3e600c54718ff90d41b_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:0774da44a434d44ae01937e7cd09474e835ea66d7bf4e3e600c54718ff90d41b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/vector-rhel9@sha256%3A0774da44a434d44ae01937e7cd09474e835ea66d7bf4e3e600c54718ff90d41b?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/vector-rhel9\u0026tag=1790704889"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0cdf057b90ab1a06b114c1d7eb684beac325e947187245757e600cf6c8d695ea_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0cdf057b90ab1a06b114c1d7eb684beac325e947187245757e600cf6c8d695ea_s390x",
"product_id": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0cdf057b90ab1a06b114c1d7eb684beac325e947187245757e600cf6c8d695ea_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-logging-rhel9-operator@sha256%3A0cdf057b90ab1a06b114c1d7eb684beac325e947187245757e600cf6c8d695ea?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator\u0026tag=1790704484"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a5cdae5033367bd2dfb2afe58b141eb3b081efc8ff08a92ee7baae9493673eae_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a5cdae5033367bd2dfb2afe58b141eb3b081efc8ff08a92ee7baae9493673eae_s390x",
"product_id": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a5cdae5033367bd2dfb2afe58b141eb3b081efc8ff08a92ee7baae9493673eae_s390x",
"product_identification_helper": {
"purl": "pkg:oci/eventrouter-rhel9@sha256%3Aa5cdae5033367bd2dfb2afe58b141eb3b081efc8ff08a92ee7baae9493673eae?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel9\u0026tag=1790704438"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:f1ceed7fbc7bffbf4799ebef749fae87bcf1acb265367299bbd771f94198301f_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:f1ceed7fbc7bffbf4799ebef749fae87bcf1acb265367299bbd771f94198301f_s390x",
"product_id": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:f1ceed7fbc7bffbf4799ebef749fae87bcf1acb265367299bbd771f94198301f_s390x",
"product_identification_helper": {
"purl": "pkg:oci/log-file-metric-exporter-rhel9@sha256%3Af1ceed7fbc7bffbf4799ebef749fae87bcf1acb265367299bbd771f94198301f?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9\u0026tag=1790704414"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ec0a79d78677c143d5bf08ba24ce87e06b97a4b29df721276170cfd3ccd443d3_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ec0a79d78677c143d5bf08ba24ce87e06b97a4b29df721276170cfd3ccd443d3_s390x",
"product_id": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ec0a79d78677c143d5bf08ba24ce87e06b97a4b29df721276170cfd3ccd443d3_s390x",
"product_identification_helper": {
"purl": "pkg:oci/logging-loki-rhel9@sha256%3Aec0a79d78677c143d5bf08ba24ce87e06b97a4b29df721276170cfd3ccd443d3?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/logging-loki-rhel9\u0026tag=1790704601"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:26b899f654e17f0e6fae80859a4455efed141a5db62a9fde2dd1ffcb57eda396_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:26b899f654e17f0e6fae80859a4455efed141a5db62a9fde2dd1ffcb57eda396_s390x",
"product_id": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:26b899f654e17f0e6fae80859a4455efed141a5db62a9fde2dd1ffcb57eda396_s390x",
"product_identification_helper": {
"purl": "pkg:oci/loki-rhel9-operator@sha256%3A26b899f654e17f0e6fae80859a4455efed141a5db62a9fde2dd1ffcb57eda396?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/loki-rhel9-operator\u0026tag=1790704426"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3a74f0ebba75ca491bd357a8f5d2e02e6b18508cbf426253e4654cfc1530183d_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3a74f0ebba75ca491bd357a8f5d2e02e6b18508cbf426253e4654cfc1530183d_s390x",
"product_id": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3a74f0ebba75ca491bd357a8f5d2e02e6b18508cbf426253e4654cfc1530183d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/lokistack-gateway-rhel9@sha256%3A3a74f0ebba75ca491bd357a8f5d2e02e6b18508cbf426253e4654cfc1530183d?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/lokistack-gateway-rhel9\u0026tag=1790704519"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:762b5776f1b31474e4052204e7fe7dce35b44dc8756b9d4078554d7a2c0ad6af_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:762b5776f1b31474e4052204e7fe7dce35b44dc8756b9d4078554d7a2c0ad6af_s390x",
"product_id": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:762b5776f1b31474e4052204e7fe7dce35b44dc8756b9d4078554d7a2c0ad6af_s390x",
"product_identification_helper": {
"purl": "pkg:oci/opa-openshift-rhel9@sha256%3A762b5776f1b31474e4052204e7fe7dce35b44dc8756b9d4078554d7a2c0ad6af?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/opa-openshift-rhel9\u0026tag=1790704462"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:3688f9448ea2ce01c3ec0c1d5b9e8644300c138ef5fd1c94459b5c00b97cf58c_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:3688f9448ea2ce01c3ec0c1d5b9e8644300c138ef5fd1c94459b5c00b97cf58c_s390x",
"product_id": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:3688f9448ea2ce01c3ec0c1d5b9e8644300c138ef5fd1c94459b5c00b97cf58c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/vector-rhel9@sha256%3A3688f9448ea2ce01c3ec0c1d5b9e8644300c138ef5fd1c94459b5c00b97cf58c?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/vector-rhel9\u0026tag=1790704889"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:5867a6765408efba2f8a4a5f06a7cf3a108b7144074681d437254f88cdf8d904_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.4",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:5867a6765408efba2f8a4a5f06a7cf3a108b7144074681d437254f88cdf8d904_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:5867a6765408efba2f8a4a5f06a7cf3a108b7144074681d437254f88cdf8d904_amd64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0cdf057b90ab1a06b114c1d7eb684beac325e947187245757e600cf6c8d695ea_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.4",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0cdf057b90ab1a06b114c1d7eb684beac325e947187245757e600cf6c8d695ea_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0cdf057b90ab1a06b114c1d7eb684beac325e947187245757e600cf6c8d695ea_s390x",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:1ceb575d48c09b784ca8ec3b90154344f88e62aa3c737223e57f820b1eae93f8_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.4",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:1ceb575d48c09b784ca8ec3b90154344f88e62aa3c737223e57f820b1eae93f8_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:1ceb575d48c09b784ca8ec3b90154344f88e62aa3c737223e57f820b1eae93f8_amd64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:229cc5581673229756c23afed9faca1af773aabbe714995471dc0b0675ec5109_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.4",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:229cc5581673229756c23afed9faca1af773aabbe714995471dc0b0675ec5109_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:229cc5581673229756c23afed9faca1af773aabbe714995471dc0b0675ec5109_arm64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:85ce6360373096dae5338fd372359d186457b583b8c403b84741f59ac2e926d9_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.4",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:85ce6360373096dae5338fd372359d186457b583b8c403b84741f59ac2e926d9_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:85ce6360373096dae5338fd372359d186457b583b8c403b84741f59ac2e926d9_ppc64le",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2ba6fef395812b97c1ca3bdc812550b84008d8a0222b2a0232800d9420e0742a_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.4",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2ba6fef395812b97c1ca3bdc812550b84008d8a0222b2a0232800d9420e0742a_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2ba6fef395812b97c1ca3bdc812550b84008d8a0222b2a0232800d9420e0742a_arm64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:51825481204047d89d21c390c369f60c2d7c6f90d1b9688b249eef79ec8308be_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.4",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:51825481204047d89d21c390c369f60c2d7c6f90d1b9688b249eef79ec8308be_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:51825481204047d89d21c390c369f60c2d7c6f90d1b9688b249eef79ec8308be_amd64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a2b5a0c0323b844fcdc09360603c6f2f263cd391c012461de71a951cec39bd0b_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.4",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a2b5a0c0323b844fcdc09360603c6f2f263cd391c012461de71a951cec39bd0b_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a2b5a0c0323b844fcdc09360603c6f2f263cd391c012461de71a951cec39bd0b_ppc64le",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a5cdae5033367bd2dfb2afe58b141eb3b081efc8ff08a92ee7baae9493673eae_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.4",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a5cdae5033367bd2dfb2afe58b141eb3b081efc8ff08a92ee7baae9493673eae_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a5cdae5033367bd2dfb2afe58b141eb3b081efc8ff08a92ee7baae9493673eae_s390x",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6e05aaa40d8030f2d03959c5b828da2d6630d770052fb780f1493c7f0f127cf3_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.4",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6e05aaa40d8030f2d03959c5b828da2d6630d770052fb780f1493c7f0f127cf3_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6e05aaa40d8030f2d03959c5b828da2d6630d770052fb780f1493c7f0f127cf3_amd64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8f92a06f20fece433448c93d337f648dda47340114ab62076b604134b7dbfc03_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.4",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8f92a06f20fece433448c93d337f648dda47340114ab62076b604134b7dbfc03_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8f92a06f20fece433448c93d337f648dda47340114ab62076b604134b7dbfc03_ppc64le",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9dcf615c12e91f47b951ce8d231a1a81231ecee294e88d926890bedd6e2546d_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.4",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9dcf615c12e91f47b951ce8d231a1a81231ecee294e88d926890bedd6e2546d_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9dcf615c12e91f47b951ce8d231a1a81231ecee294e88d926890bedd6e2546d_arm64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:f1ceed7fbc7bffbf4799ebef749fae87bcf1acb265367299bbd771f94198301f_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.4",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:f1ceed7fbc7bffbf4799ebef749fae87bcf1acb265367299bbd771f94198301f_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:f1ceed7fbc7bffbf4799ebef749fae87bcf1acb265367299bbd771f94198301f_s390x",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:07ea5a2c3d6a85f2d9b4db461f6d0709e9b041a2478480ab807803970386660d_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.4",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:07ea5a2c3d6a85f2d9b4db461f6d0709e9b041a2478480ab807803970386660d_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:07ea5a2c3d6a85f2d9b4db461f6d0709e9b041a2478480ab807803970386660d_arm64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:899870404d2aab5cc3ef06159f1c3fea6ea11a76d3fb6c266a28881a57a84af8_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.4",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:899870404d2aab5cc3ef06159f1c3fea6ea11a76d3fb6c266a28881a57a84af8_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:899870404d2aab5cc3ef06159f1c3fea6ea11a76d3fb6c266a28881a57a84af8_ppc64le",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:cfe363b8dcd6f87cb6ff16fb1deab90539ec611712ed47fa1cd796e38ffa7dac_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.4",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:cfe363b8dcd6f87cb6ff16fb1deab90539ec611712ed47fa1cd796e38ffa7dac_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:cfe363b8dcd6f87cb6ff16fb1deab90539ec611712ed47fa1cd796e38ffa7dac_amd64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ec0a79d78677c143d5bf08ba24ce87e06b97a4b29df721276170cfd3ccd443d3_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.4",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ec0a79d78677c143d5bf08ba24ce87e06b97a4b29df721276170cfd3ccd443d3_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ec0a79d78677c143d5bf08ba24ce87e06b97a4b29df721276170cfd3ccd443d3_s390x",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:140282663fbcf4c0bc14fd5928cb5b5bf395f152e0bccea6c024daec038cb1eb_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.4",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:140282663fbcf4c0bc14fd5928cb5b5bf395f152e0bccea6c024daec038cb1eb_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:140282663fbcf4c0bc14fd5928cb5b5bf395f152e0bccea6c024daec038cb1eb_amd64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:26b899f654e17f0e6fae80859a4455efed141a5db62a9fde2dd1ffcb57eda396_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.4",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:26b899f654e17f0e6fae80859a4455efed141a5db62a9fde2dd1ffcb57eda396_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:26b899f654e17f0e6fae80859a4455efed141a5db62a9fde2dd1ffcb57eda396_s390x",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:2c2c98561106ba1395ef994d0168860e8d5c0a16ffcb2bbaf9de30afd2daaee9_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.4",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:2c2c98561106ba1395ef994d0168860e8d5c0a16ffcb2bbaf9de30afd2daaee9_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:2c2c98561106ba1395ef994d0168860e8d5c0a16ffcb2bbaf9de30afd2daaee9_amd64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6ff7218557873037213de9174025674529cfd4d476e2214251a4e6698fbede7b_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.4",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6ff7218557873037213de9174025674529cfd4d476e2214251a4e6698fbede7b_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6ff7218557873037213de9174025674529cfd4d476e2214251a4e6698fbede7b_ppc64le",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8b4bf1cf4db332afaaacf4d6e8e02d3dd3257c6d3964f1d1de63acab62bfa282_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.4",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8b4bf1cf4db332afaaacf4d6e8e02d3dd3257c6d3964f1d1de63acab62bfa282_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8b4bf1cf4db332afaaacf4d6e8e02d3dd3257c6d3964f1d1de63acab62bfa282_arm64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3644b09eff92d9406079df144b8083633c0218c3efa48d2411a1b18627b5e9d2_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.4",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3644b09eff92d9406079df144b8083633c0218c3efa48d2411a1b18627b5e9d2_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3644b09eff92d9406079df144b8083633c0218c3efa48d2411a1b18627b5e9d2_ppc64le",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3a74f0ebba75ca491bd357a8f5d2e02e6b18508cbf426253e4654cfc1530183d_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.4",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3a74f0ebba75ca491bd357a8f5d2e02e6b18508cbf426253e4654cfc1530183d_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3a74f0ebba75ca491bd357a8f5d2e02e6b18508cbf426253e4654cfc1530183d_s390x",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b1c4331b5b8b0eee432af830a11f6cf43d9699d790d09c011b2b1a02007ca13_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.4",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b1c4331b5b8b0eee432af830a11f6cf43d9699d790d09c011b2b1a02007ca13_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b1c4331b5b8b0eee432af830a11f6cf43d9699d790d09c011b2b1a02007ca13_arm64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b18585062c47e8ff7cd973bfb0faa920aa85608501e952e7b053d4ebb337bdd4_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.4",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b18585062c47e8ff7cd973bfb0faa920aa85608501e952e7b053d4ebb337bdd4_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b18585062c47e8ff7cd973bfb0faa920aa85608501e952e7b053d4ebb337bdd4_amd64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:762b5776f1b31474e4052204e7fe7dce35b44dc8756b9d4078554d7a2c0ad6af_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.4",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:762b5776f1b31474e4052204e7fe7dce35b44dc8756b9d4078554d7a2c0ad6af_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:762b5776f1b31474e4052204e7fe7dce35b44dc8756b9d4078554d7a2c0ad6af_s390x",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c21fc4fc18a3cd7bac6ef26b1ea5678277e768eb0df9a1e9567396cad4290ebc_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.4",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c21fc4fc18a3cd7bac6ef26b1ea5678277e768eb0df9a1e9567396cad4290ebc_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c21fc4fc18a3cd7bac6ef26b1ea5678277e768eb0df9a1e9567396cad4290ebc_ppc64le",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c90304afb7cd803c1fc0749696850360899e705ff3ce5fd8bd1228135412d6a8_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.4",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c90304afb7cd803c1fc0749696850360899e705ff3ce5fd8bd1228135412d6a8_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c90304afb7cd803c1fc0749696850360899e705ff3ce5fd8bd1228135412d6a8_arm64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:cdc2c9394d14cae8bb2d81dc02643f5463045e03b7ec93951146ca8b116905e9_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.4",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:cdc2c9394d14cae8bb2d81dc02643f5463045e03b7ec93951146ca8b116905e9_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:cdc2c9394d14cae8bb2d81dc02643f5463045e03b7ec93951146ca8b116905e9_amd64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:0774da44a434d44ae01937e7cd09474e835ea66d7bf4e3e600c54718ff90d41b_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.4",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0774da44a434d44ae01937e7cd09474e835ea66d7bf4e3e600c54718ff90d41b_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:0774da44a434d44ae01937e7cd09474e835ea66d7bf4e3e600c54718ff90d41b_ppc64le",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:3688f9448ea2ce01c3ec0c1d5b9e8644300c138ef5fd1c94459b5c00b97cf58c_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.4",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3688f9448ea2ce01c3ec0c1d5b9e8644300c138ef5fd1c94459b5c00b97cf58c_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:3688f9448ea2ce01c3ec0c1d5b9e8644300c138ef5fd1c94459b5c00b97cf58c_s390x",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:415e888a82f18c127c327a5d267d058c35687cba4aa49b340770de9a2d03b335_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.4",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:415e888a82f18c127c327a5d267d058c35687cba4aa49b340770de9a2d03b335_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:415e888a82f18c127c327a5d267d058c35687cba4aa49b340770de9a2d03b335_arm64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:89456745024875f12623aef30fdb27d712c23d1025ca3ee4c79ebfb9af77f2a4_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.4",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:89456745024875f12623aef30fdb27d712c23d1025ca3ee4c79ebfb9af77f2a4_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:89456745024875f12623aef30fdb27d712c23d1025ca3ee4c79ebfb9af77f2a4_amd64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-41178",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-04T16:01:10.300537+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:5867a6765408efba2f8a4a5f06a7cf3a108b7144074681d437254f88cdf8d904_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0cdf057b90ab1a06b114c1d7eb684beac325e947187245757e600cf6c8d695ea_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:1ceb575d48c09b784ca8ec3b90154344f88e62aa3c737223e57f820b1eae93f8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:229cc5581673229756c23afed9faca1af773aabbe714995471dc0b0675ec5109_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:85ce6360373096dae5338fd372359d186457b583b8c403b84741f59ac2e926d9_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2ba6fef395812b97c1ca3bdc812550b84008d8a0222b2a0232800d9420e0742a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:51825481204047d89d21c390c369f60c2d7c6f90d1b9688b249eef79ec8308be_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a2b5a0c0323b844fcdc09360603c6f2f263cd391c012461de71a951cec39bd0b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a5cdae5033367bd2dfb2afe58b141eb3b081efc8ff08a92ee7baae9493673eae_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6e05aaa40d8030f2d03959c5b828da2d6630d770052fb780f1493c7f0f127cf3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8f92a06f20fece433448c93d337f648dda47340114ab62076b604134b7dbfc03_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9dcf615c12e91f47b951ce8d231a1a81231ecee294e88d926890bedd6e2546d_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:f1ceed7fbc7bffbf4799ebef749fae87bcf1acb265367299bbd771f94198301f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:140282663fbcf4c0bc14fd5928cb5b5bf395f152e0bccea6c024daec038cb1eb_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:762b5776f1b31474e4052204e7fe7dce35b44dc8756b9d4078554d7a2c0ad6af_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c21fc4fc18a3cd7bac6ef26b1ea5678277e768eb0df9a1e9567396cad4290ebc_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c90304afb7cd803c1fc0749696850360899e705ff3ce5fd8bd1228135412d6a8_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:cdc2c9394d14cae8bb2d81dc02643f5463045e03b7ec93951146ca8b116905e9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0774da44a434d44ae01937e7cd09474e835ea66d7bf4e3e600c54718ff90d41b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3688f9448ea2ce01c3ec0c1d5b9e8644300c138ef5fd1c94459b5c00b97cf58c_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:415e888a82f18c127c327a5d267d058c35687cba4aa49b340770de9a2d03b335_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:89456745024875f12623aef30fdb27d712c23d1025ca3ee4c79ebfb9af77f2a4_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484830"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenTelemetry-Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by sending oversized or invalid baggage headers. The `Parse` function, in affected versions, failed to reject raw-length inputs, leading to excessive processing and error logging when handling these large inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in OpenTelemetry-Go, affecting versions 1.41.0 and 1.43.0. An attacker can exploit this flaw by sending oversized baggage headers, causing the `Parse` function to process invalid inputs and log errors, which can lead to resource exhaustion and service disruption in Red Hat products utilizing these affected OpenTelemetry-Go versions. The impact is considered Important due to the potential for remote, unauthenticated denial of service.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:07ea5a2c3d6a85f2d9b4db461f6d0709e9b041a2478480ab807803970386660d_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:899870404d2aab5cc3ef06159f1c3fea6ea11a76d3fb6c266a28881a57a84af8_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:cfe363b8dcd6f87cb6ff16fb1deab90539ec611712ed47fa1cd796e38ffa7dac_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ec0a79d78677c143d5bf08ba24ce87e06b97a4b29df721276170cfd3ccd443d3_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:26b899f654e17f0e6fae80859a4455efed141a5db62a9fde2dd1ffcb57eda396_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:2c2c98561106ba1395ef994d0168860e8d5c0a16ffcb2bbaf9de30afd2daaee9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6ff7218557873037213de9174025674529cfd4d476e2214251a4e6698fbede7b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8b4bf1cf4db332afaaacf4d6e8e02d3dd3257c6d3964f1d1de63acab62bfa282_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3644b09eff92d9406079df144b8083633c0218c3efa48d2411a1b18627b5e9d2_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3a74f0ebba75ca491bd357a8f5d2e02e6b18508cbf426253e4654cfc1530183d_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b1c4331b5b8b0eee432af830a11f6cf43d9699d790d09c011b2b1a02007ca13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b18585062c47e8ff7cd973bfb0faa920aa85608501e952e7b053d4ebb337bdd4_amd64"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:5867a6765408efba2f8a4a5f06a7cf3a108b7144074681d437254f88cdf8d904_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0cdf057b90ab1a06b114c1d7eb684beac325e947187245757e600cf6c8d695ea_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:1ceb575d48c09b784ca8ec3b90154344f88e62aa3c737223e57f820b1eae93f8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:229cc5581673229756c23afed9faca1af773aabbe714995471dc0b0675ec5109_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:85ce6360373096dae5338fd372359d186457b583b8c403b84741f59ac2e926d9_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2ba6fef395812b97c1ca3bdc812550b84008d8a0222b2a0232800d9420e0742a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:51825481204047d89d21c390c369f60c2d7c6f90d1b9688b249eef79ec8308be_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a2b5a0c0323b844fcdc09360603c6f2f263cd391c012461de71a951cec39bd0b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a5cdae5033367bd2dfb2afe58b141eb3b081efc8ff08a92ee7baae9493673eae_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6e05aaa40d8030f2d03959c5b828da2d6630d770052fb780f1493c7f0f127cf3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8f92a06f20fece433448c93d337f648dda47340114ab62076b604134b7dbfc03_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9dcf615c12e91f47b951ce8d231a1a81231ecee294e88d926890bedd6e2546d_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:f1ceed7fbc7bffbf4799ebef749fae87bcf1acb265367299bbd771f94198301f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:140282663fbcf4c0bc14fd5928cb5b5bf395f152e0bccea6c024daec038cb1eb_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:762b5776f1b31474e4052204e7fe7dce35b44dc8756b9d4078554d7a2c0ad6af_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c21fc4fc18a3cd7bac6ef26b1ea5678277e768eb0df9a1e9567396cad4290ebc_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c90304afb7cd803c1fc0749696850360899e705ff3ce5fd8bd1228135412d6a8_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:cdc2c9394d14cae8bb2d81dc02643f5463045e03b7ec93951146ca8b116905e9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0774da44a434d44ae01937e7cd09474e835ea66d7bf4e3e600c54718ff90d41b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3688f9448ea2ce01c3ec0c1d5b9e8644300c138ef5fd1c94459b5c00b97cf58c_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:415e888a82f18c127c327a5d267d058c35687cba4aa49b340770de9a2d03b335_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:89456745024875f12623aef30fdb27d712c23d1025ca3ee4c79ebfb9af77f2a4_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-41178"
},
{
"category": "external",
"summary": "RHBZ#2484830",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484830"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-41178",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41178"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41178",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41178"
},
{
"category": "external",
"summary": "https://github.com/open-telemetry/opentelemetry-go/pull/7880",
"url": "https://github.com/open-telemetry/opentelemetry-go/pull/7880"
},
{
"category": "external",
"summary": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-5wrp-cwcj-q835",
"url": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-5wrp-cwcj-q835"
}
],
"release_date": "2026-06-04T14:38:23.707000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-07T13:52:35+00:00",
"details": "For OpenShift Container Platform 4.20 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html/release_notes/ocp-4-20-release-notes\n\nFor Red Hat OpenShift Logging 6.4, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.4",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:07ea5a2c3d6a85f2d9b4db461f6d0709e9b041a2478480ab807803970386660d_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:899870404d2aab5cc3ef06159f1c3fea6ea11a76d3fb6c266a28881a57a84af8_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:cfe363b8dcd6f87cb6ff16fb1deab90539ec611712ed47fa1cd796e38ffa7dac_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ec0a79d78677c143d5bf08ba24ce87e06b97a4b29df721276170cfd3ccd443d3_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:26b899f654e17f0e6fae80859a4455efed141a5db62a9fde2dd1ffcb57eda396_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:2c2c98561106ba1395ef994d0168860e8d5c0a16ffcb2bbaf9de30afd2daaee9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6ff7218557873037213de9174025674529cfd4d476e2214251a4e6698fbede7b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8b4bf1cf4db332afaaacf4d6e8e02d3dd3257c6d3964f1d1de63acab62bfa282_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3644b09eff92d9406079df144b8083633c0218c3efa48d2411a1b18627b5e9d2_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3a74f0ebba75ca491bd357a8f5d2e02e6b18508cbf426253e4654cfc1530183d_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b1c4331b5b8b0eee432af830a11f6cf43d9699d790d09c011b2b1a02007ca13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b18585062c47e8ff7cd973bfb0faa920aa85608501e952e7b053d4ebb337bdd4_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:77639"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:5867a6765408efba2f8a4a5f06a7cf3a108b7144074681d437254f88cdf8d904_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0cdf057b90ab1a06b114c1d7eb684beac325e947187245757e600cf6c8d695ea_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:1ceb575d48c09b784ca8ec3b90154344f88e62aa3c737223e57f820b1eae93f8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:229cc5581673229756c23afed9faca1af773aabbe714995471dc0b0675ec5109_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:85ce6360373096dae5338fd372359d186457b583b8c403b84741f59ac2e926d9_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2ba6fef395812b97c1ca3bdc812550b84008d8a0222b2a0232800d9420e0742a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:51825481204047d89d21c390c369f60c2d7c6f90d1b9688b249eef79ec8308be_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a2b5a0c0323b844fcdc09360603c6f2f263cd391c012461de71a951cec39bd0b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a5cdae5033367bd2dfb2afe58b141eb3b081efc8ff08a92ee7baae9493673eae_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6e05aaa40d8030f2d03959c5b828da2d6630d770052fb780f1493c7f0f127cf3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8f92a06f20fece433448c93d337f648dda47340114ab62076b604134b7dbfc03_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9dcf615c12e91f47b951ce8d231a1a81231ecee294e88d926890bedd6e2546d_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:f1ceed7fbc7bffbf4799ebef749fae87bcf1acb265367299bbd771f94198301f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:07ea5a2c3d6a85f2d9b4db461f6d0709e9b041a2478480ab807803970386660d_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:899870404d2aab5cc3ef06159f1c3fea6ea11a76d3fb6c266a28881a57a84af8_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:cfe363b8dcd6f87cb6ff16fb1deab90539ec611712ed47fa1cd796e38ffa7dac_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ec0a79d78677c143d5bf08ba24ce87e06b97a4b29df721276170cfd3ccd443d3_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:140282663fbcf4c0bc14fd5928cb5b5bf395f152e0bccea6c024daec038cb1eb_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:26b899f654e17f0e6fae80859a4455efed141a5db62a9fde2dd1ffcb57eda396_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:2c2c98561106ba1395ef994d0168860e8d5c0a16ffcb2bbaf9de30afd2daaee9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6ff7218557873037213de9174025674529cfd4d476e2214251a4e6698fbede7b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8b4bf1cf4db332afaaacf4d6e8e02d3dd3257c6d3964f1d1de63acab62bfa282_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3644b09eff92d9406079df144b8083633c0218c3efa48d2411a1b18627b5e9d2_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3a74f0ebba75ca491bd357a8f5d2e02e6b18508cbf426253e4654cfc1530183d_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b1c4331b5b8b0eee432af830a11f6cf43d9699d790d09c011b2b1a02007ca13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b18585062c47e8ff7cd973bfb0faa920aa85608501e952e7b053d4ebb337bdd4_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:762b5776f1b31474e4052204e7fe7dce35b44dc8756b9d4078554d7a2c0ad6af_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c21fc4fc18a3cd7bac6ef26b1ea5678277e768eb0df9a1e9567396cad4290ebc_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c90304afb7cd803c1fc0749696850360899e705ff3ce5fd8bd1228135412d6a8_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:cdc2c9394d14cae8bb2d81dc02643f5463045e03b7ec93951146ca8b116905e9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0774da44a434d44ae01937e7cd09474e835ea66d7bf4e3e600c54718ff90d41b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3688f9448ea2ce01c3ec0c1d5b9e8644300c138ef5fd1c94459b5c00b97cf58c_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:415e888a82f18c127c327a5d267d058c35687cba4aa49b340770de9a2d03b335_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:89456745024875f12623aef30fdb27d712c23d1025ca3ee4c79ebfb9af77f2a4_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers"
},
{
"cve": "CVE-2026-42151",
"cwe": {
"id": "CWE-256",
"name": "Plaintext Storage of a Password"
},
"discovery_date": "2026-05-04T19:02:26.983660+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:5867a6765408efba2f8a4a5f06a7cf3a108b7144074681d437254f88cdf8d904_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0cdf057b90ab1a06b114c1d7eb684beac325e947187245757e600cf6c8d695ea_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:1ceb575d48c09b784ca8ec3b90154344f88e62aa3c737223e57f820b1eae93f8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:229cc5581673229756c23afed9faca1af773aabbe714995471dc0b0675ec5109_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:85ce6360373096dae5338fd372359d186457b583b8c403b84741f59ac2e926d9_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2ba6fef395812b97c1ca3bdc812550b84008d8a0222b2a0232800d9420e0742a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:51825481204047d89d21c390c369f60c2d7c6f90d1b9688b249eef79ec8308be_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a2b5a0c0323b844fcdc09360603c6f2f263cd391c012461de71a951cec39bd0b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a5cdae5033367bd2dfb2afe58b141eb3b081efc8ff08a92ee7baae9493673eae_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6e05aaa40d8030f2d03959c5b828da2d6630d770052fb780f1493c7f0f127cf3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8f92a06f20fece433448c93d337f648dda47340114ab62076b604134b7dbfc03_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9dcf615c12e91f47b951ce8d231a1a81231ecee294e88d926890bedd6e2546d_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:f1ceed7fbc7bffbf4799ebef749fae87bcf1acb265367299bbd771f94198301f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:140282663fbcf4c0bc14fd5928cb5b5bf395f152e0bccea6c024daec038cb1eb_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0774da44a434d44ae01937e7cd09474e835ea66d7bf4e3e600c54718ff90d41b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3688f9448ea2ce01c3ec0c1d5b9e8644300c138ef5fd1c94459b5c00b97cf58c_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:415e888a82f18c127c327a5d267d058c35687cba4aa49b340770de9a2d03b335_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:89456745024875f12623aef30fdb27d712c23d1025ca3ee4c79ebfb9af77f2a4_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466507"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important information disclosure flaw in Prometheus affects instances configured to use Azure AD remote write with OAuth authentication. The client secret, intended to be a secure credential, is exposed in plaintext through the `/-/config` HTTP API endpoint. This could allow an attacker with access to this endpoint to retrieve the secret, potentially compromising integrated Azure AD services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:07ea5a2c3d6a85f2d9b4db461f6d0709e9b041a2478480ab807803970386660d_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:899870404d2aab5cc3ef06159f1c3fea6ea11a76d3fb6c266a28881a57a84af8_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:cfe363b8dcd6f87cb6ff16fb1deab90539ec611712ed47fa1cd796e38ffa7dac_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ec0a79d78677c143d5bf08ba24ce87e06b97a4b29df721276170cfd3ccd443d3_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:26b899f654e17f0e6fae80859a4455efed141a5db62a9fde2dd1ffcb57eda396_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:2c2c98561106ba1395ef994d0168860e8d5c0a16ffcb2bbaf9de30afd2daaee9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6ff7218557873037213de9174025674529cfd4d476e2214251a4e6698fbede7b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8b4bf1cf4db332afaaacf4d6e8e02d3dd3257c6d3964f1d1de63acab62bfa282_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3644b09eff92d9406079df144b8083633c0218c3efa48d2411a1b18627b5e9d2_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3a74f0ebba75ca491bd357a8f5d2e02e6b18508cbf426253e4654cfc1530183d_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b1c4331b5b8b0eee432af830a11f6cf43d9699d790d09c011b2b1a02007ca13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b18585062c47e8ff7cd973bfb0faa920aa85608501e952e7b053d4ebb337bdd4_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:762b5776f1b31474e4052204e7fe7dce35b44dc8756b9d4078554d7a2c0ad6af_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c21fc4fc18a3cd7bac6ef26b1ea5678277e768eb0df9a1e9567396cad4290ebc_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c90304afb7cd803c1fc0749696850360899e705ff3ce5fd8bd1228135412d6a8_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:cdc2c9394d14cae8bb2d81dc02643f5463045e03b7ec93951146ca8b116905e9_amd64"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:5867a6765408efba2f8a4a5f06a7cf3a108b7144074681d437254f88cdf8d904_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0cdf057b90ab1a06b114c1d7eb684beac325e947187245757e600cf6c8d695ea_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:1ceb575d48c09b784ca8ec3b90154344f88e62aa3c737223e57f820b1eae93f8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:229cc5581673229756c23afed9faca1af773aabbe714995471dc0b0675ec5109_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:85ce6360373096dae5338fd372359d186457b583b8c403b84741f59ac2e926d9_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2ba6fef395812b97c1ca3bdc812550b84008d8a0222b2a0232800d9420e0742a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:51825481204047d89d21c390c369f60c2d7c6f90d1b9688b249eef79ec8308be_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a2b5a0c0323b844fcdc09360603c6f2f263cd391c012461de71a951cec39bd0b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a5cdae5033367bd2dfb2afe58b141eb3b081efc8ff08a92ee7baae9493673eae_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6e05aaa40d8030f2d03959c5b828da2d6630d770052fb780f1493c7f0f127cf3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8f92a06f20fece433448c93d337f648dda47340114ab62076b604134b7dbfc03_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9dcf615c12e91f47b951ce8d231a1a81231ecee294e88d926890bedd6e2546d_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:f1ceed7fbc7bffbf4799ebef749fae87bcf1acb265367299bbd771f94198301f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:140282663fbcf4c0bc14fd5928cb5b5bf395f152e0bccea6c024daec038cb1eb_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0774da44a434d44ae01937e7cd09474e835ea66d7bf4e3e600c54718ff90d41b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3688f9448ea2ce01c3ec0c1d5b9e8644300c138ef5fd1c94459b5c00b97cf58c_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:415e888a82f18c127c327a5d267d058c35687cba4aa49b340770de9a2d03b335_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:89456745024875f12623aef30fdb27d712c23d1025ca3ee4c79ebfb9af77f2a4_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "RHBZ#2466507",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18587",
"url": "https://github.com/prometheus/prometheus/pull/18587"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18590",
"url": "https://github.com/prometheus/prometheus/pull/18590"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj"
}
],
"release_date": "2026-05-04T18:12:16.917000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-07T13:52:35+00:00",
"details": "For OpenShift Container Platform 4.20 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html/release_notes/ocp-4-20-release-notes\n\nFor Red Hat OpenShift Logging 6.4, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.4",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:07ea5a2c3d6a85f2d9b4db461f6d0709e9b041a2478480ab807803970386660d_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:899870404d2aab5cc3ef06159f1c3fea6ea11a76d3fb6c266a28881a57a84af8_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:cfe363b8dcd6f87cb6ff16fb1deab90539ec611712ed47fa1cd796e38ffa7dac_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ec0a79d78677c143d5bf08ba24ce87e06b97a4b29df721276170cfd3ccd443d3_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:26b899f654e17f0e6fae80859a4455efed141a5db62a9fde2dd1ffcb57eda396_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:2c2c98561106ba1395ef994d0168860e8d5c0a16ffcb2bbaf9de30afd2daaee9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6ff7218557873037213de9174025674529cfd4d476e2214251a4e6698fbede7b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8b4bf1cf4db332afaaacf4d6e8e02d3dd3257c6d3964f1d1de63acab62bfa282_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3644b09eff92d9406079df144b8083633c0218c3efa48d2411a1b18627b5e9d2_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3a74f0ebba75ca491bd357a8f5d2e02e6b18508cbf426253e4654cfc1530183d_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b1c4331b5b8b0eee432af830a11f6cf43d9699d790d09c011b2b1a02007ca13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b18585062c47e8ff7cd973bfb0faa920aa85608501e952e7b053d4ebb337bdd4_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:762b5776f1b31474e4052204e7fe7dce35b44dc8756b9d4078554d7a2c0ad6af_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c21fc4fc18a3cd7bac6ef26b1ea5678277e768eb0df9a1e9567396cad4290ebc_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c90304afb7cd803c1fc0749696850360899e705ff3ce5fd8bd1228135412d6a8_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:cdc2c9394d14cae8bb2d81dc02643f5463045e03b7ec93951146ca8b116905e9_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:77639"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:5867a6765408efba2f8a4a5f06a7cf3a108b7144074681d437254f88cdf8d904_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0cdf057b90ab1a06b114c1d7eb684beac325e947187245757e600cf6c8d695ea_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:1ceb575d48c09b784ca8ec3b90154344f88e62aa3c737223e57f820b1eae93f8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:229cc5581673229756c23afed9faca1af773aabbe714995471dc0b0675ec5109_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:85ce6360373096dae5338fd372359d186457b583b8c403b84741f59ac2e926d9_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2ba6fef395812b97c1ca3bdc812550b84008d8a0222b2a0232800d9420e0742a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:51825481204047d89d21c390c369f60c2d7c6f90d1b9688b249eef79ec8308be_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a2b5a0c0323b844fcdc09360603c6f2f263cd391c012461de71a951cec39bd0b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a5cdae5033367bd2dfb2afe58b141eb3b081efc8ff08a92ee7baae9493673eae_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6e05aaa40d8030f2d03959c5b828da2d6630d770052fb780f1493c7f0f127cf3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8f92a06f20fece433448c93d337f648dda47340114ab62076b604134b7dbfc03_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9dcf615c12e91f47b951ce8d231a1a81231ecee294e88d926890bedd6e2546d_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:f1ceed7fbc7bffbf4799ebef749fae87bcf1acb265367299bbd771f94198301f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:07ea5a2c3d6a85f2d9b4db461f6d0709e9b041a2478480ab807803970386660d_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:899870404d2aab5cc3ef06159f1c3fea6ea11a76d3fb6c266a28881a57a84af8_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:cfe363b8dcd6f87cb6ff16fb1deab90539ec611712ed47fa1cd796e38ffa7dac_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ec0a79d78677c143d5bf08ba24ce87e06b97a4b29df721276170cfd3ccd443d3_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:140282663fbcf4c0bc14fd5928cb5b5bf395f152e0bccea6c024daec038cb1eb_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:26b899f654e17f0e6fae80859a4455efed141a5db62a9fde2dd1ffcb57eda396_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:2c2c98561106ba1395ef994d0168860e8d5c0a16ffcb2bbaf9de30afd2daaee9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6ff7218557873037213de9174025674529cfd4d476e2214251a4e6698fbede7b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8b4bf1cf4db332afaaacf4d6e8e02d3dd3257c6d3964f1d1de63acab62bfa282_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3644b09eff92d9406079df144b8083633c0218c3efa48d2411a1b18627b5e9d2_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3a74f0ebba75ca491bd357a8f5d2e02e6b18508cbf426253e4654cfc1530183d_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b1c4331b5b8b0eee432af830a11f6cf43d9699d790d09c011b2b1a02007ca13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b18585062c47e8ff7cd973bfb0faa920aa85608501e952e7b053d4ebb337bdd4_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:762b5776f1b31474e4052204e7fe7dce35b44dc8756b9d4078554d7a2c0ad6af_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c21fc4fc18a3cd7bac6ef26b1ea5678277e768eb0df9a1e9567396cad4290ebc_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c90304afb7cd803c1fc0749696850360899e705ff3ce5fd8bd1228135412d6a8_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:cdc2c9394d14cae8bb2d81dc02643f5463045e03b7ec93951146ca8b116905e9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0774da44a434d44ae01937e7cd09474e835ea66d7bf4e3e600c54718ff90d41b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3688f9448ea2ce01c3ec0c1d5b9e8644300c138ef5fd1c94459b5c00b97cf58c_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:415e888a82f18c127c327a5d267d058c35687cba4aa49b340770de9a2d03b335_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:89456745024875f12623aef30fdb27d712c23d1025ca3ee4c79ebfb9af77f2a4_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API"
},
{
"cve": "CVE-2026-42154",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-04T19:02:19.626646+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:5867a6765408efba2f8a4a5f06a7cf3a108b7144074681d437254f88cdf8d904_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0cdf057b90ab1a06b114c1d7eb684beac325e947187245757e600cf6c8d695ea_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:1ceb575d48c09b784ca8ec3b90154344f88e62aa3c737223e57f820b1eae93f8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:229cc5581673229756c23afed9faca1af773aabbe714995471dc0b0675ec5109_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:85ce6360373096dae5338fd372359d186457b583b8c403b84741f59ac2e926d9_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2ba6fef395812b97c1ca3bdc812550b84008d8a0222b2a0232800d9420e0742a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:51825481204047d89d21c390c369f60c2d7c6f90d1b9688b249eef79ec8308be_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a2b5a0c0323b844fcdc09360603c6f2f263cd391c012461de71a951cec39bd0b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a5cdae5033367bd2dfb2afe58b141eb3b081efc8ff08a92ee7baae9493673eae_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6e05aaa40d8030f2d03959c5b828da2d6630d770052fb780f1493c7f0f127cf3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8f92a06f20fece433448c93d337f648dda47340114ab62076b604134b7dbfc03_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9dcf615c12e91f47b951ce8d231a1a81231ecee294e88d926890bedd6e2546d_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:f1ceed7fbc7bffbf4799ebef749fae87bcf1acb265367299bbd771f94198301f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:07ea5a2c3d6a85f2d9b4db461f6d0709e9b041a2478480ab807803970386660d_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:899870404d2aab5cc3ef06159f1c3fea6ea11a76d3fb6c266a28881a57a84af8_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:cfe363b8dcd6f87cb6ff16fb1deab90539ec611712ed47fa1cd796e38ffa7dac_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ec0a79d78677c143d5bf08ba24ce87e06b97a4b29df721276170cfd3ccd443d3_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:140282663fbcf4c0bc14fd5928cb5b5bf395f152e0bccea6c024daec038cb1eb_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0774da44a434d44ae01937e7cd09474e835ea66d7bf4e3e600c54718ff90d41b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3688f9448ea2ce01c3ec0c1d5b9e8644300c138ef5fd1c94459b5c00b97cf58c_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:415e888a82f18c127c327a5d267d058c35687cba4aa49b340770de9a2d03b335_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:89456745024875f12623aef30fdb27d712c23d1025ca3ee4c79ebfb9af77f2a4_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466505"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in Prometheus, allowing an unauthenticated remote attacker to crash the Prometheus process. This could lead to service unavailability in Red Hat products that deploy Prometheus for monitoring, as the remote read endpoint does not properly validate snappy-compressed request lengths.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:26b899f654e17f0e6fae80859a4455efed141a5db62a9fde2dd1ffcb57eda396_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:2c2c98561106ba1395ef994d0168860e8d5c0a16ffcb2bbaf9de30afd2daaee9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6ff7218557873037213de9174025674529cfd4d476e2214251a4e6698fbede7b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8b4bf1cf4db332afaaacf4d6e8e02d3dd3257c6d3964f1d1de63acab62bfa282_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3644b09eff92d9406079df144b8083633c0218c3efa48d2411a1b18627b5e9d2_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3a74f0ebba75ca491bd357a8f5d2e02e6b18508cbf426253e4654cfc1530183d_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b1c4331b5b8b0eee432af830a11f6cf43d9699d790d09c011b2b1a02007ca13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b18585062c47e8ff7cd973bfb0faa920aa85608501e952e7b053d4ebb337bdd4_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:762b5776f1b31474e4052204e7fe7dce35b44dc8756b9d4078554d7a2c0ad6af_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c21fc4fc18a3cd7bac6ef26b1ea5678277e768eb0df9a1e9567396cad4290ebc_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c90304afb7cd803c1fc0749696850360899e705ff3ce5fd8bd1228135412d6a8_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:cdc2c9394d14cae8bb2d81dc02643f5463045e03b7ec93951146ca8b116905e9_amd64"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:5867a6765408efba2f8a4a5f06a7cf3a108b7144074681d437254f88cdf8d904_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0cdf057b90ab1a06b114c1d7eb684beac325e947187245757e600cf6c8d695ea_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:1ceb575d48c09b784ca8ec3b90154344f88e62aa3c737223e57f820b1eae93f8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:229cc5581673229756c23afed9faca1af773aabbe714995471dc0b0675ec5109_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:85ce6360373096dae5338fd372359d186457b583b8c403b84741f59ac2e926d9_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2ba6fef395812b97c1ca3bdc812550b84008d8a0222b2a0232800d9420e0742a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:51825481204047d89d21c390c369f60c2d7c6f90d1b9688b249eef79ec8308be_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a2b5a0c0323b844fcdc09360603c6f2f263cd391c012461de71a951cec39bd0b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a5cdae5033367bd2dfb2afe58b141eb3b081efc8ff08a92ee7baae9493673eae_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6e05aaa40d8030f2d03959c5b828da2d6630d770052fb780f1493c7f0f127cf3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8f92a06f20fece433448c93d337f648dda47340114ab62076b604134b7dbfc03_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9dcf615c12e91f47b951ce8d231a1a81231ecee294e88d926890bedd6e2546d_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:f1ceed7fbc7bffbf4799ebef749fae87bcf1acb265367299bbd771f94198301f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:07ea5a2c3d6a85f2d9b4db461f6d0709e9b041a2478480ab807803970386660d_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:899870404d2aab5cc3ef06159f1c3fea6ea11a76d3fb6c266a28881a57a84af8_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:cfe363b8dcd6f87cb6ff16fb1deab90539ec611712ed47fa1cd796e38ffa7dac_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ec0a79d78677c143d5bf08ba24ce87e06b97a4b29df721276170cfd3ccd443d3_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:140282663fbcf4c0bc14fd5928cb5b5bf395f152e0bccea6c024daec038cb1eb_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0774da44a434d44ae01937e7cd09474e835ea66d7bf4e3e600c54718ff90d41b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3688f9448ea2ce01c3ec0c1d5b9e8644300c138ef5fd1c94459b5c00b97cf58c_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:415e888a82f18c127c327a5d267d058c35687cba4aa49b340770de9a2d03b335_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:89456745024875f12623aef30fdb27d712c23d1025ca3ee4c79ebfb9af77f2a4_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "RHBZ#2466505",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466505"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42154",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42154"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18584",
"url": "https://github.com/prometheus/prometheus/pull/18584"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18585",
"url": "https://github.com/prometheus/prometheus/pull/18585"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm"
}
],
"release_date": "2026-05-04T18:13:12.340000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-07T13:52:35+00:00",
"details": "For OpenShift Container Platform 4.20 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html/release_notes/ocp-4-20-release-notes\n\nFor Red Hat OpenShift Logging 6.4, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.4",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:26b899f654e17f0e6fae80859a4455efed141a5db62a9fde2dd1ffcb57eda396_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:2c2c98561106ba1395ef994d0168860e8d5c0a16ffcb2bbaf9de30afd2daaee9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6ff7218557873037213de9174025674529cfd4d476e2214251a4e6698fbede7b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8b4bf1cf4db332afaaacf4d6e8e02d3dd3257c6d3964f1d1de63acab62bfa282_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3644b09eff92d9406079df144b8083633c0218c3efa48d2411a1b18627b5e9d2_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3a74f0ebba75ca491bd357a8f5d2e02e6b18508cbf426253e4654cfc1530183d_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b1c4331b5b8b0eee432af830a11f6cf43d9699d790d09c011b2b1a02007ca13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b18585062c47e8ff7cd973bfb0faa920aa85608501e952e7b053d4ebb337bdd4_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:762b5776f1b31474e4052204e7fe7dce35b44dc8756b9d4078554d7a2c0ad6af_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c21fc4fc18a3cd7bac6ef26b1ea5678277e768eb0df9a1e9567396cad4290ebc_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c90304afb7cd803c1fc0749696850360899e705ff3ce5fd8bd1228135412d6a8_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:cdc2c9394d14cae8bb2d81dc02643f5463045e03b7ec93951146ca8b116905e9_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:77639"
},
{
"category": "workaround",
"details": "To mitigate this issue, restrict network access to the Prometheus remote read endpoint (/api/v1/read). Configure firewall rules or network policies to permit connections only from trusted internal networks or authorized clients. This action reduces the attack surface by limiting exposure to unauthenticated remote attackers. A service restart or reload may be required for the changes to take effect.",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:5867a6765408efba2f8a4a5f06a7cf3a108b7144074681d437254f88cdf8d904_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0cdf057b90ab1a06b114c1d7eb684beac325e947187245757e600cf6c8d695ea_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:1ceb575d48c09b784ca8ec3b90154344f88e62aa3c737223e57f820b1eae93f8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:229cc5581673229756c23afed9faca1af773aabbe714995471dc0b0675ec5109_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:85ce6360373096dae5338fd372359d186457b583b8c403b84741f59ac2e926d9_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2ba6fef395812b97c1ca3bdc812550b84008d8a0222b2a0232800d9420e0742a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:51825481204047d89d21c390c369f60c2d7c6f90d1b9688b249eef79ec8308be_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a2b5a0c0323b844fcdc09360603c6f2f263cd391c012461de71a951cec39bd0b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a5cdae5033367bd2dfb2afe58b141eb3b081efc8ff08a92ee7baae9493673eae_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6e05aaa40d8030f2d03959c5b828da2d6630d770052fb780f1493c7f0f127cf3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8f92a06f20fece433448c93d337f648dda47340114ab62076b604134b7dbfc03_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9dcf615c12e91f47b951ce8d231a1a81231ecee294e88d926890bedd6e2546d_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:f1ceed7fbc7bffbf4799ebef749fae87bcf1acb265367299bbd771f94198301f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:07ea5a2c3d6a85f2d9b4db461f6d0709e9b041a2478480ab807803970386660d_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:899870404d2aab5cc3ef06159f1c3fea6ea11a76d3fb6c266a28881a57a84af8_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:cfe363b8dcd6f87cb6ff16fb1deab90539ec611712ed47fa1cd796e38ffa7dac_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ec0a79d78677c143d5bf08ba24ce87e06b97a4b29df721276170cfd3ccd443d3_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:140282663fbcf4c0bc14fd5928cb5b5bf395f152e0bccea6c024daec038cb1eb_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:26b899f654e17f0e6fae80859a4455efed141a5db62a9fde2dd1ffcb57eda396_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:2c2c98561106ba1395ef994d0168860e8d5c0a16ffcb2bbaf9de30afd2daaee9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6ff7218557873037213de9174025674529cfd4d476e2214251a4e6698fbede7b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8b4bf1cf4db332afaaacf4d6e8e02d3dd3257c6d3964f1d1de63acab62bfa282_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3644b09eff92d9406079df144b8083633c0218c3efa48d2411a1b18627b5e9d2_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3a74f0ebba75ca491bd357a8f5d2e02e6b18508cbf426253e4654cfc1530183d_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b1c4331b5b8b0eee432af830a11f6cf43d9699d790d09c011b2b1a02007ca13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b18585062c47e8ff7cd973bfb0faa920aa85608501e952e7b053d4ebb337bdd4_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:762b5776f1b31474e4052204e7fe7dce35b44dc8756b9d4078554d7a2c0ad6af_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c21fc4fc18a3cd7bac6ef26b1ea5678277e768eb0df9a1e9567396cad4290ebc_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c90304afb7cd803c1fc0749696850360899e705ff3ce5fd8bd1228135412d6a8_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:cdc2c9394d14cae8bb2d81dc02643f5463045e03b7ec93951146ca8b116905e9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0774da44a434d44ae01937e7cd09474e835ea66d7bf4e3e600c54718ff90d41b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3688f9448ea2ce01c3ec0c1d5b9e8644300c138ef5fd1c94459b5c00b97cf58c_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:415e888a82f18c127c327a5d267d058c35687cba4aa49b340770de9a2d03b335_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:89456745024875f12623aef30fdb27d712c23d1025ca3ee4c79ebfb9af77f2a4_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:5867a6765408efba2f8a4a5f06a7cf3a108b7144074681d437254f88cdf8d904_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0cdf057b90ab1a06b114c1d7eb684beac325e947187245757e600cf6c8d695ea_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:1ceb575d48c09b784ca8ec3b90154344f88e62aa3c737223e57f820b1eae93f8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:229cc5581673229756c23afed9faca1af773aabbe714995471dc0b0675ec5109_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:85ce6360373096dae5338fd372359d186457b583b8c403b84741f59ac2e926d9_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2ba6fef395812b97c1ca3bdc812550b84008d8a0222b2a0232800d9420e0742a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:51825481204047d89d21c390c369f60c2d7c6f90d1b9688b249eef79ec8308be_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a2b5a0c0323b844fcdc09360603c6f2f263cd391c012461de71a951cec39bd0b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a5cdae5033367bd2dfb2afe58b141eb3b081efc8ff08a92ee7baae9493673eae_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6e05aaa40d8030f2d03959c5b828da2d6630d770052fb780f1493c7f0f127cf3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8f92a06f20fece433448c93d337f648dda47340114ab62076b604134b7dbfc03_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9dcf615c12e91f47b951ce8d231a1a81231ecee294e88d926890bedd6e2546d_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:f1ceed7fbc7bffbf4799ebef749fae87bcf1acb265367299bbd771f94198301f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:07ea5a2c3d6a85f2d9b4db461f6d0709e9b041a2478480ab807803970386660d_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:899870404d2aab5cc3ef06159f1c3fea6ea11a76d3fb6c266a28881a57a84af8_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:cfe363b8dcd6f87cb6ff16fb1deab90539ec611712ed47fa1cd796e38ffa7dac_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ec0a79d78677c143d5bf08ba24ce87e06b97a4b29df721276170cfd3ccd443d3_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:140282663fbcf4c0bc14fd5928cb5b5bf395f152e0bccea6c024daec038cb1eb_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:26b899f654e17f0e6fae80859a4455efed141a5db62a9fde2dd1ffcb57eda396_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:2c2c98561106ba1395ef994d0168860e8d5c0a16ffcb2bbaf9de30afd2daaee9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6ff7218557873037213de9174025674529cfd4d476e2214251a4e6698fbede7b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8b4bf1cf4db332afaaacf4d6e8e02d3dd3257c6d3964f1d1de63acab62bfa282_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3644b09eff92d9406079df144b8083633c0218c3efa48d2411a1b18627b5e9d2_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3a74f0ebba75ca491bd357a8f5d2e02e6b18508cbf426253e4654cfc1530183d_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b1c4331b5b8b0eee432af830a11f6cf43d9699d790d09c011b2b1a02007ca13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b18585062c47e8ff7cd973bfb0faa920aa85608501e952e7b053d4ebb337bdd4_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:762b5776f1b31474e4052204e7fe7dce35b44dc8756b9d4078554d7a2c0ad6af_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c21fc4fc18a3cd7bac6ef26b1ea5678277e768eb0df9a1e9567396cad4290ebc_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c90304afb7cd803c1fc0749696850360899e705ff3ce5fd8bd1228135412d6a8_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:cdc2c9394d14cae8bb2d81dc02643f5463045e03b7ec93951146ca8b116905e9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0774da44a434d44ae01937e7cd09474e835ea66d7bf4e3e600c54718ff90d41b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3688f9448ea2ce01c3ec0c1d5b9e8644300c138ef5fd1c94459b5c00b97cf58c_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:415e888a82f18c127c327a5d267d058c35687cba4aa49b340770de9a2d03b335_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:89456745024875f12623aef30fdb27d712c23d1025ca3ee4c79ebfb9af77f2a4_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint"
},
{
"cve": "CVE-2026-42502",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:11.151484+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:5867a6765408efba2f8a4a5f06a7cf3a108b7144074681d437254f88cdf8d904_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0cdf057b90ab1a06b114c1d7eb684beac325e947187245757e600cf6c8d695ea_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:1ceb575d48c09b784ca8ec3b90154344f88e62aa3c737223e57f820b1eae93f8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:229cc5581673229756c23afed9faca1af773aabbe714995471dc0b0675ec5109_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:85ce6360373096dae5338fd372359d186457b583b8c403b84741f59ac2e926d9_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2ba6fef395812b97c1ca3bdc812550b84008d8a0222b2a0232800d9420e0742a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:51825481204047d89d21c390c369f60c2d7c6f90d1b9688b249eef79ec8308be_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a2b5a0c0323b844fcdc09360603c6f2f263cd391c012461de71a951cec39bd0b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a5cdae5033367bd2dfb2afe58b141eb3b081efc8ff08a92ee7baae9493673eae_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6e05aaa40d8030f2d03959c5b828da2d6630d770052fb780f1493c7f0f127cf3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8f92a06f20fece433448c93d337f648dda47340114ab62076b604134b7dbfc03_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9dcf615c12e91f47b951ce8d231a1a81231ecee294e88d926890bedd6e2546d_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:f1ceed7fbc7bffbf4799ebef749fae87bcf1acb265367299bbd771f94198301f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:140282663fbcf4c0bc14fd5928cb5b5bf395f152e0bccea6c024daec038cb1eb_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:26b899f654e17f0e6fae80859a4455efed141a5db62a9fde2dd1ffcb57eda396_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:2c2c98561106ba1395ef994d0168860e8d5c0a16ffcb2bbaf9de30afd2daaee9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6ff7218557873037213de9174025674529cfd4d476e2214251a4e6698fbede7b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8b4bf1cf4db332afaaacf4d6e8e02d3dd3257c6d3964f1d1de63acab62bfa282_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3644b09eff92d9406079df144b8083633c0218c3efa48d2411a1b18627b5e9d2_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3a74f0ebba75ca491bd357a8f5d2e02e6b18508cbf426253e4654cfc1530183d_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b1c4331b5b8b0eee432af830a11f6cf43d9699d790d09c011b2b1a02007ca13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b18585062c47e8ff7cd973bfb0faa920aa85608501e952e7b053d4ebb337bdd4_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:762b5776f1b31474e4052204e7fe7dce35b44dc8756b9d4078554d7a2c0ad6af_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c21fc4fc18a3cd7bac6ef26b1ea5678277e768eb0df9a1e9567396cad4290ebc_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c90304afb7cd803c1fc0749696850360899e705ff3ce5fd8bd1228135412d6a8_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:cdc2c9394d14cae8bb2d81dc02643f5463045e03b7ec93951146ca8b116905e9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0774da44a434d44ae01937e7cd09474e835ea66d7bf4e3e600c54718ff90d41b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3688f9448ea2ce01c3ec0c1d5b9e8644300c138ef5fd1c94459b5c00b97cf58c_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:415e888a82f18c127c327a5d267d058c35687cba4aa49b340770de9a2d03b335_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:89456745024875f12623aef30fdb27d712c23d1025ca3ee4c79ebfb9af77f2a4_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480762"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. This vulnerability allows an attacker to manipulate how HTML is processed and displayed. By providing specially crafted HTML, an attacker can cause an unexpected structure in the rendered output. This can lead to Cross-Site Scripting (XSS) attacks, where malicious scripts are executed in a user\u0027s web browser, potentially compromising user data or taking control of their session.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw in golang.org/x/net/html can lead to Cross-Site Scripting (XSS) in applications that parse and render untrusted HTML, even with sanitization attempts. This is due to an unexpected HTML tree structure, allowing malicious scripts to execute in a user\u0027s browser.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:07ea5a2c3d6a85f2d9b4db461f6d0709e9b041a2478480ab807803970386660d_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:899870404d2aab5cc3ef06159f1c3fea6ea11a76d3fb6c266a28881a57a84af8_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:cfe363b8dcd6f87cb6ff16fb1deab90539ec611712ed47fa1cd796e38ffa7dac_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ec0a79d78677c143d5bf08ba24ce87e06b97a4b29df721276170cfd3ccd443d3_s390x"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:5867a6765408efba2f8a4a5f06a7cf3a108b7144074681d437254f88cdf8d904_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0cdf057b90ab1a06b114c1d7eb684beac325e947187245757e600cf6c8d695ea_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:1ceb575d48c09b784ca8ec3b90154344f88e62aa3c737223e57f820b1eae93f8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:229cc5581673229756c23afed9faca1af773aabbe714995471dc0b0675ec5109_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:85ce6360373096dae5338fd372359d186457b583b8c403b84741f59ac2e926d9_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2ba6fef395812b97c1ca3bdc812550b84008d8a0222b2a0232800d9420e0742a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:51825481204047d89d21c390c369f60c2d7c6f90d1b9688b249eef79ec8308be_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a2b5a0c0323b844fcdc09360603c6f2f263cd391c012461de71a951cec39bd0b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a5cdae5033367bd2dfb2afe58b141eb3b081efc8ff08a92ee7baae9493673eae_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6e05aaa40d8030f2d03959c5b828da2d6630d770052fb780f1493c7f0f127cf3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8f92a06f20fece433448c93d337f648dda47340114ab62076b604134b7dbfc03_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9dcf615c12e91f47b951ce8d231a1a81231ecee294e88d926890bedd6e2546d_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:f1ceed7fbc7bffbf4799ebef749fae87bcf1acb265367299bbd771f94198301f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:140282663fbcf4c0bc14fd5928cb5b5bf395f152e0bccea6c024daec038cb1eb_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:26b899f654e17f0e6fae80859a4455efed141a5db62a9fde2dd1ffcb57eda396_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:2c2c98561106ba1395ef994d0168860e8d5c0a16ffcb2bbaf9de30afd2daaee9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6ff7218557873037213de9174025674529cfd4d476e2214251a4e6698fbede7b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8b4bf1cf4db332afaaacf4d6e8e02d3dd3257c6d3964f1d1de63acab62bfa282_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3644b09eff92d9406079df144b8083633c0218c3efa48d2411a1b18627b5e9d2_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3a74f0ebba75ca491bd357a8f5d2e02e6b18508cbf426253e4654cfc1530183d_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b1c4331b5b8b0eee432af830a11f6cf43d9699d790d09c011b2b1a02007ca13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b18585062c47e8ff7cd973bfb0faa920aa85608501e952e7b053d4ebb337bdd4_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:762b5776f1b31474e4052204e7fe7dce35b44dc8756b9d4078554d7a2c0ad6af_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c21fc4fc18a3cd7bac6ef26b1ea5678277e768eb0df9a1e9567396cad4290ebc_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c90304afb7cd803c1fc0749696850360899e705ff3ce5fd8bd1228135412d6a8_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:cdc2c9394d14cae8bb2d81dc02643f5463045e03b7ec93951146ca8b116905e9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0774da44a434d44ae01937e7cd09474e835ea66d7bf4e3e600c54718ff90d41b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3688f9448ea2ce01c3ec0c1d5b9e8644300c138ef5fd1c94459b5c00b97cf58c_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:415e888a82f18c127c327a5d267d058c35687cba4aa49b340770de9a2d03b335_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:89456745024875f12623aef30fdb27d712c23d1025ca3ee4c79ebfb9af77f2a4_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42502"
},
{
"category": "external",
"summary": "RHBZ#2480762",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480762"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42502",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42502"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42502",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42502"
},
{
"category": "external",
"summary": "https://go.dev/cl/781701",
"url": "https://go.dev/cl/781701"
},
{
"category": "external",
"summary": "https://go.dev/issue/79572",
"url": "https://go.dev/issue/79572"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5027",
"url": "https://pkg.go.dev/vuln/GO-2026-5027"
}
],
"release_date": "2026-05-22T15:01:21.649000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-07T13:52:35+00:00",
"details": "For OpenShift Container Platform 4.20 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html/release_notes/ocp-4-20-release-notes\n\nFor Red Hat OpenShift Logging 6.4, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.4",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:07ea5a2c3d6a85f2d9b4db461f6d0709e9b041a2478480ab807803970386660d_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:899870404d2aab5cc3ef06159f1c3fea6ea11a76d3fb6c266a28881a57a84af8_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:cfe363b8dcd6f87cb6ff16fb1deab90539ec611712ed47fa1cd796e38ffa7dac_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ec0a79d78677c143d5bf08ba24ce87e06b97a4b29df721276170cfd3ccd443d3_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:77639"
},
{
"category": "workaround",
"details": "Applications utilizing `golang.org/x/net/html` should implement robust sanitization of all untrusted HTML input before rendering to prevent the creation of unexpected HTML structures that could facilitate XSS attacks. If an application does not require rendering arbitrary HTML, it should avoid processing such input.",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:5867a6765408efba2f8a4a5f06a7cf3a108b7144074681d437254f88cdf8d904_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0cdf057b90ab1a06b114c1d7eb684beac325e947187245757e600cf6c8d695ea_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:1ceb575d48c09b784ca8ec3b90154344f88e62aa3c737223e57f820b1eae93f8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:229cc5581673229756c23afed9faca1af773aabbe714995471dc0b0675ec5109_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:85ce6360373096dae5338fd372359d186457b583b8c403b84741f59ac2e926d9_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2ba6fef395812b97c1ca3bdc812550b84008d8a0222b2a0232800d9420e0742a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:51825481204047d89d21c390c369f60c2d7c6f90d1b9688b249eef79ec8308be_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a2b5a0c0323b844fcdc09360603c6f2f263cd391c012461de71a951cec39bd0b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a5cdae5033367bd2dfb2afe58b141eb3b081efc8ff08a92ee7baae9493673eae_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6e05aaa40d8030f2d03959c5b828da2d6630d770052fb780f1493c7f0f127cf3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8f92a06f20fece433448c93d337f648dda47340114ab62076b604134b7dbfc03_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9dcf615c12e91f47b951ce8d231a1a81231ecee294e88d926890bedd6e2546d_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:f1ceed7fbc7bffbf4799ebef749fae87bcf1acb265367299bbd771f94198301f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:07ea5a2c3d6a85f2d9b4db461f6d0709e9b041a2478480ab807803970386660d_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:899870404d2aab5cc3ef06159f1c3fea6ea11a76d3fb6c266a28881a57a84af8_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:cfe363b8dcd6f87cb6ff16fb1deab90539ec611712ed47fa1cd796e38ffa7dac_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ec0a79d78677c143d5bf08ba24ce87e06b97a4b29df721276170cfd3ccd443d3_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:140282663fbcf4c0bc14fd5928cb5b5bf395f152e0bccea6c024daec038cb1eb_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:26b899f654e17f0e6fae80859a4455efed141a5db62a9fde2dd1ffcb57eda396_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:2c2c98561106ba1395ef994d0168860e8d5c0a16ffcb2bbaf9de30afd2daaee9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6ff7218557873037213de9174025674529cfd4d476e2214251a4e6698fbede7b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8b4bf1cf4db332afaaacf4d6e8e02d3dd3257c6d3964f1d1de63acab62bfa282_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3644b09eff92d9406079df144b8083633c0218c3efa48d2411a1b18627b5e9d2_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3a74f0ebba75ca491bd357a8f5d2e02e6b18508cbf426253e4654cfc1530183d_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b1c4331b5b8b0eee432af830a11f6cf43d9699d790d09c011b2b1a02007ca13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b18585062c47e8ff7cd973bfb0faa920aa85608501e952e7b053d4ebb337bdd4_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:762b5776f1b31474e4052204e7fe7dce35b44dc8756b9d4078554d7a2c0ad6af_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c21fc4fc18a3cd7bac6ef26b1ea5678277e768eb0df9a1e9567396cad4290ebc_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c90304afb7cd803c1fc0749696850360899e705ff3ce5fd8bd1228135412d6a8_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:cdc2c9394d14cae8bb2d81dc02643f5463045e03b7ec93951146ca8b116905e9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0774da44a434d44ae01937e7cd09474e835ea66d7bf4e3e600c54718ff90d41b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3688f9448ea2ce01c3ec0c1d5b9e8644300c138ef5fd1c94459b5c00b97cf58c_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:415e888a82f18c127c327a5d267d058c35687cba4aa49b340770de9a2d03b335_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:89456745024875f12623aef30fdb27d712c23d1025ca3ee4c79ebfb9af77f2a4_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:5867a6765408efba2f8a4a5f06a7cf3a108b7144074681d437254f88cdf8d904_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0cdf057b90ab1a06b114c1d7eb684beac325e947187245757e600cf6c8d695ea_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:1ceb575d48c09b784ca8ec3b90154344f88e62aa3c737223e57f820b1eae93f8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:229cc5581673229756c23afed9faca1af773aabbe714995471dc0b0675ec5109_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:85ce6360373096dae5338fd372359d186457b583b8c403b84741f59ac2e926d9_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:2ba6fef395812b97c1ca3bdc812550b84008d8a0222b2a0232800d9420e0742a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:51825481204047d89d21c390c369f60c2d7c6f90d1b9688b249eef79ec8308be_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a2b5a0c0323b844fcdc09360603c6f2f263cd391c012461de71a951cec39bd0b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a5cdae5033367bd2dfb2afe58b141eb3b081efc8ff08a92ee7baae9493673eae_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6e05aaa40d8030f2d03959c5b828da2d6630d770052fb780f1493c7f0f127cf3_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8f92a06f20fece433448c93d337f648dda47340114ab62076b604134b7dbfc03_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9dcf615c12e91f47b951ce8d231a1a81231ecee294e88d926890bedd6e2546d_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:f1ceed7fbc7bffbf4799ebef749fae87bcf1acb265367299bbd771f94198301f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:07ea5a2c3d6a85f2d9b4db461f6d0709e9b041a2478480ab807803970386660d_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:899870404d2aab5cc3ef06159f1c3fea6ea11a76d3fb6c266a28881a57a84af8_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:cfe363b8dcd6f87cb6ff16fb1deab90539ec611712ed47fa1cd796e38ffa7dac_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:ec0a79d78677c143d5bf08ba24ce87e06b97a4b29df721276170cfd3ccd443d3_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:140282663fbcf4c0bc14fd5928cb5b5bf395f152e0bccea6c024daec038cb1eb_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:26b899f654e17f0e6fae80859a4455efed141a5db62a9fde2dd1ffcb57eda396_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:2c2c98561106ba1395ef994d0168860e8d5c0a16ffcb2bbaf9de30afd2daaee9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6ff7218557873037213de9174025674529cfd4d476e2214251a4e6698fbede7b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8b4bf1cf4db332afaaacf4d6e8e02d3dd3257c6d3964f1d1de63acab62bfa282_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3644b09eff92d9406079df144b8083633c0218c3efa48d2411a1b18627b5e9d2_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3a74f0ebba75ca491bd357a8f5d2e02e6b18508cbf426253e4654cfc1530183d_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b1c4331b5b8b0eee432af830a11f6cf43d9699d790d09c011b2b1a02007ca13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b18585062c47e8ff7cd973bfb0faa920aa85608501e952e7b053d4ebb337bdd4_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:762b5776f1b31474e4052204e7fe7dce35b44dc8756b9d4078554d7a2c0ad6af_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c21fc4fc18a3cd7bac6ef26b1ea5678277e768eb0df9a1e9567396cad4290ebc_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c90304afb7cd803c1fc0749696850360899e705ff3ce5fd8bd1228135412d6a8_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:cdc2c9394d14cae8bb2d81dc02643f5463045e03b7ec93951146ca8b116905e9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0774da44a434d44ae01937e7cd09474e835ea66d7bf4e3e600c54718ff90d41b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3688f9448ea2ce01c3ec0c1d5b9e8644300c138ef5fd1c94459b5c00b97cf58c_s390x",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:415e888a82f18c127c327a5d267d058c35687cba4aa49b340770de9a2d03b335_arm64",
"Logging Subsystem for Red Hat OpenShift 6.4:registry.redhat.io/openshift-logging/vector-rhel9@sha256:89456745024875f12623aef30fdb27d712c23d1025ca3ee4c79ebfb9af77f2a4_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…