Vulnerability-Lookup

RHSA-2026:95081

Vulnerability from csaf_redhat - Published: 2026-11-04 09:49 - Updated: 2026-11-07 11:42

Summary

Red Hat Security Advisory: Cluster Observability Operator - 1.5

Severity

Important

Notes

Topic: Cluster Observability Operator - 1.5

Details: Cluster Observability Operator 1.5 provides observability capabilities for cloud-native applications running on OpenShift.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2026-19534

A flaw was found in undici. A remote attacker can exploit this vulnerability by responding with an unrequested WebSocket subprotocol during the opening handshake. This causes the undici WebSocket client to crash the entire Node.js process, leading to a denial of service (DoS).

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-476 - NULL Pointer Dereference

Affected products

Fixed 16 products

Product	Version	Remediation
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2cd4f2e7687f9631565357bd5b875f70ed856e4b335c201505e6dc57c679af6d_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:62d939562320165babf6b42bb07b1d69d71a5ada621f4beda36a7cdbf41ca452_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:a3e274a01780864f4fa58cc8e3340cc36168968c980b358d2d718d82818b7705_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:e0a36f410898d1ee979dffae62709839d5df6da9643b9cf6074ab3406078fc5c_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:58cf1dac74338e0db4751c90707f4b1c3d93cd6b2d2cb02695e17c4e84f5f5fa_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:65083d63d2413e2d9ff635f7e5a8062ea668fd4c8155d32c787d6f01b473be0a_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:77eed66a0b274ab229ae986813879d1c2f203cbb16623910160d359b05893ec3_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:90c42f2bdbcd27ea4fa0c4dbd55af121b67a0ea7540ebaad30a6ca20a6c3b498_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:20639404ef198fb65a9cad2ccdf07a0ef7383b031ec302472852ceca732f0689_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:acc3365766546d7ee81ca555c78cb2f46856d868efb0a3e7d60511ee5feb2f0f_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:b4350e929666ac7580d6672b4962062b836b82126566d40376da39da3a6c557c_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:bf37ef2edbda7e52c8a54773039bc2058429b61ec95ca6d21a9c39e706db6ca7_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:42b644586b27110dcdc4df205ca5944faf57fe07526acbd1b2f41b70c3e351a1_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:9a7d564ede6c8191fa7e92da021a93978d45f143d5ebfb77ae2eea8761c0af55_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:9af8fdccfbfb9f96191db3d3b6045eb1ffc9f2c320079d2841d0f28e728e0b35_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b2202c1817f1ddaac354bbd0f432e2086bcdfe46543d63e5339356696deb7de5_amd64	—	Vendor Fix fix Workaround

Known not affected 81 products

Product	Version	Remediation
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:71bb4ed581f561262b23378f567e6b6c783c4d06c6958e42b906ca483ca78c93_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:9ac39e9d927feeccad720d8df32e8ad846a71901f6a252f6fc2458a0ed17c968_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b809d399db0cc42ca196365b4378e980d79f76d5957b6ba5d5c5660a71e49eb6_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:eb2d75c47058bbfcde2954ac6da8c1972c5de064cb3d7cc2673ad416d932d6fe_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:128cdae616cbd3b5c2c968b22485d7be0f051a4d7a2607c119d503849270db5e_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6372300ace8311564286b4b827dfb15def13071e86383809463cd60275102139_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8efbf2da142d24a1d4613a77f1dfe71b0be2c8c49aedef4d30a00ca62b32aa2a_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b0170f5f2a06fbf06e6c9b8a3aa6c9cb688c1934c1c6f8c3205e2b726024d9d9_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:73b359fbdf2c41877502c8eb795aeae868a9093b4358ab3ee6aa90e15e7873b2_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:443fa9ebb6ac2ca2c840842d6679479fc5955464908e261d44177569eff9c8af_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:49be19a20112c2ca843ea67c984fd880ab18911ef3b8757ea05961fb7379b3c3_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:7c939c36153a034eb48b6d6269905bba69ba3991c50e2904f7e943ee5ad6ba57_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:86c1cd15321eaee9004490e5abbc4c3b766518d488e924981f61bcb70c135876_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:70453cda0ffc3424177410281d43b0671eeb5bfde6e4294e2ec28d71653f68b7_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:76486b5692ce55d8b00f61d28cf60e6917a8dc878d8cf6788f170184ffd21839_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:98db286472d5466d241779d0082b57315ff752827761b287993393fa89e369c1_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:a48bd2e1b73405629fe476f83dbb9c707099b42a9d1ef824941ced101a42ff50_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:5351f576c10e79f668e11b8287c8333df95b26a36a77db74dd0a3f5376077c06_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:842d95108842a05c1310f514ebb3b6b93471a093c0f923f827638025c1879795_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:868aef34bf4b6afc9dd353ae5b66834707250b6d003f458da03ed12f1947eb9f_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:c7b1f910847ee333768cb947738e9eb34abfec1397ea346eafa289094d229f1c_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:349c911c5bc5fbb5ea0000b2c939eed2ba2e190f911d2549bc554295176b2b42_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:4875990d931e8aec312b8f983bfefe3a635e4b94fc0e124bf0aae09b62ac6b6f_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:79d4fc632872c0318156f5618d24c3786960fb7393abb25d9ec01208709610eb_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:c57650cde2f0d81539f67d31011468cf04af38c2f7e0b57e12988da4c455cb15_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:019c2e3c17a20166f3c207caca8c6b26a83c93e57141e4bf75553df6586d7a8a_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:58a3da4874df410cf9d5ad99db7ba87bd07144206388f408d9fbf1ebc95f9c03_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:5b89406f5817450acfe562d5006c1c00a8443ef8f4b9eee6326a7279420c3495_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:b9106f58d8ba6143393e1494e0f7d651d1360719e3c38b24005080981bfd27dc_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:4782aa11b8230e56729ec9bccfc4895a3343f7a42e24493b79b87eea09dd1da2_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:923ee684d8c97393b704e525c6ad4965df090c68ad1055d4a78323aea385ca18_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b0068fc5b41442eed9a545433553e2750c9bb150dd609568b8176e01603f7640_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:e974db96e70635d7a08bd1432903b0b6a9822702bda62015a8f96d2a59e2091c_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:0933ff0b400ed79c993a6175388eb5e251bcf50d401f64c7834d43733ad6ba93_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:96a023f63099eb8384a5cc77cd0abc7cb8e758c29d73d3ccb1a3e7e8dce32968_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:c049f1264a2b594ab78aee1edf308e01a55d3389bd333f304ba3470db4d1a898_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:f47e3ed2d1628242792cf4ccbf12d27c287a2598c73645a58e651c6880c55806_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6a6e33ae6d021bd2926eabe45a9128872036d981361c24b871002bc7a5305d12_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:926c07a18734c82bc5185cb8003aeeceeddfe55b793a430a48788c29be77c534_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:c48482927e28fcdc950a0d0e2761ffd992a37489cf3490e65250eb0828e205e0_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:cf73e3a3588ac1fef8363ae99b6b8cd7c05f8beac49f187210c506fd0c603867_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:14bddb6185b655aa31cf17ce23069c4ca921cdf2caea296b59cd7033e92d0590_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1c6c2ea48c21315a82362059ddf72e6d39f1b74e5f247ffbe5dfccbc489899d9_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:75f3cfee21c647347a00ed370bf48a37c5b91d86895bd357ea4f99c4571cab39_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:9361daf08d52df508e31c34d8989b1b588722ca557ba559913ce1a7b457c2953_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:4c4d34cb5d409591bde12c9d5610f746e3dad1d460d3fea9c613d0ae3f81d64f_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:602869c79b8b43e72a7e940c8bb088d91ecc1a448dd8c529baf3440ea9287559_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:90be25d82b8831bcd2baa1e5b2e37bf0c231e882885a1b568592dfb91bc58abf_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:db28988ba5225106449a05224d019cd25897385854230b7e39c7e3e4521093bd_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:06d3e779706d1187ecf1028b21883cb3d140a4357f8807dc8b8f011aad6f7f31_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:25d19e097b5ae0bc0d9e8f918bb5f1015ccdf77eb6d93350d3f0bcf1d7ee7937_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:3261677cb85bf9a87e4dc134396b71943e2e76821d0e35d7f8ddfa0cb4059140_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:e0f529589bf67cd7368bac7a2edb3c2e21423249c0514cff5e52e81c2b9fa11e_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:5b46489d5cea06c76497c5c8fcc535ad807b1c76734e493d0e066e23aec373ad_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:85f18ee14b931d2df20cd7b694467c53cf40864a057bc790b67b547fdd8beb39_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:b0281c14e6eb30e6ada9224f1c56c01bb101362adaecf46a9143245dd6c32b8c_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:ffd398dc9520463d713db4e2e1aefc6a6bb6c7b03694b69273f7296705ea51e2_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:54487b1509a0e951b74d30953a3732aa1adbf30e2c42fcacd3097667c277917d_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:59a71e223a49140412f052606c790bea160795ebb7b641a6de3001da7068e0b0_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:77d5053f790356decfbaa8fb249896858629fb2841a2afec64e527b4f4239439_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f2b285b37154654fb219227d42a5016327a13f99e0a5a0d9c04e29acb97f6fe9_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:2f479a222750e381a350390a7409bddf8b7be82b84702d49fc88a066b6d7f579_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:d934b23a365583a2278e953b9caac94415a187cab398a671376e710d3848d960_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:e6b757f955568b429df8c11e5ea5d7307b7a31b76d062f4461b67837eb9883f1_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:f1ada4311455e4ad9fa66b5f702abe188cf85d06907580d3fcaa6a0628b11fb2_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:27c2265f15c17641f0ba8743270b87e21ef0b9c85d50b48284a4450e7a7c67e7_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:76dc19b8923e825e0a50e32c59228c1b42827e770fbbc561a8f08a2fcd4722fa_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:b8f7cb6561e0577c0b5e06bd0304e00d7ae953dab395faa8928f5f21902afefd_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:c59180d8ab63901671ef112914eb38ccde6fc1649432cb7028e9282fe03409ec_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:0faed089022b06e67e0013d6fd171d1495117f7081ab0432492a04ec0162e22b_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:13eb206e1b9444217978c0895cabd4a54c6c7976cad6aadc4d8191fbf95513f9_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:29b4ce69fe85e81609e6ca7913a54f198c71f59cb0dbcc2aa6802c4d237c28bd_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:85668b4b3e5e91df4056702faf71a7981a6d9b1f77dac9b3c276288a2ddf0871_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:5a6420e67fa2ccc567e7421072ba1a6a3820ad3e964cef9d4ab09dfd02f34e30_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:bfcaee36b5c4b7a5e28f805a8063dcd9b7184cd633e042e4721a4313c36f2e82_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:d025df3add1287645833ef66bc9c992f08a9263cb9f48365ba82731fcefc5108_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:d1bd1dc3dc47bbed345db1cf76958104d23f3f1a23961f1f65e19c910aebeaf8_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:1b37ddf287b032e4ffe62096b1bebd03d6e1b955a983e3cb59d22f2c3fa8c6c9_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:3052464455752660000d20685dbb087544f2b60bbcf4c768e2e831c6f8777b1f_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:cf0fba7f83930c5b402de0af6335d950e5901219ab434c124eac73061a014354_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:f5895ae776750ed7b835825abc2b2ae0091462233c48f91bace88da473f9b0b6_s390x	—	Workaround

Threats

Impact Important

CVE-2026-27145

A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-606 - Unchecked Input for Loop Condition

Affected products

Fixed 24 products

Product	Version	Remediation
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:71bb4ed581f561262b23378f567e6b6c783c4d06c6958e42b906ca483ca78c93_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:9ac39e9d927feeccad720d8df32e8ad846a71901f6a252f6fc2458a0ed17c968_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b809d399db0cc42ca196365b4378e980d79f76d5957b6ba5d5c5660a71e49eb6_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:eb2d75c47058bbfcde2954ac6da8c1972c5de064cb3d7cc2673ad416d932d6fe_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:443fa9ebb6ac2ca2c840842d6679479fc5955464908e261d44177569eff9c8af_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:49be19a20112c2ca843ea67c984fd880ab18911ef3b8757ea05961fb7379b3c3_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:7c939c36153a034eb48b6d6269905bba69ba3991c50e2904f7e943ee5ad6ba57_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:86c1cd15321eaee9004490e5abbc4c3b766518d488e924981f61bcb70c135876_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:4c4d34cb5d409591bde12c9d5610f746e3dad1d460d3fea9c613d0ae3f81d64f_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:602869c79b8b43e72a7e940c8bb088d91ecc1a448dd8c529baf3440ea9287559_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:90be25d82b8831bcd2baa1e5b2e37bf0c231e882885a1b568592dfb91bc58abf_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:db28988ba5225106449a05224d019cd25897385854230b7e39c7e3e4521093bd_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:06d3e779706d1187ecf1028b21883cb3d140a4357f8807dc8b8f011aad6f7f31_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:25d19e097b5ae0bc0d9e8f918bb5f1015ccdf77eb6d93350d3f0bcf1d7ee7937_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:3261677cb85bf9a87e4dc134396b71943e2e76821d0e35d7f8ddfa0cb4059140_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:e0f529589bf67cd7368bac7a2edb3c2e21423249c0514cff5e52e81c2b9fa11e_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:5b46489d5cea06c76497c5c8fcc535ad807b1c76734e493d0e066e23aec373ad_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:85f18ee14b931d2df20cd7b694467c53cf40864a057bc790b67b547fdd8beb39_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:b0281c14e6eb30e6ada9224f1c56c01bb101362adaecf46a9143245dd6c32b8c_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:ffd398dc9520463d713db4e2e1aefc6a6bb6c7b03694b69273f7296705ea51e2_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:27c2265f15c17641f0ba8743270b87e21ef0b9c85d50b48284a4450e7a7c67e7_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:76dc19b8923e825e0a50e32c59228c1b42827e770fbbc561a8f08a2fcd4722fa_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:b8f7cb6561e0577c0b5e06bd0304e00d7ae953dab395faa8928f5f21902afefd_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:c59180d8ab63901671ef112914eb38ccde6fc1649432cb7028e9282fe03409ec_arm64	—	Vendor Fix fix Workaround

Known not affected 73 products

Product	Version	Remediation
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:128cdae616cbd3b5c2c968b22485d7be0f051a4d7a2607c119d503849270db5e_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6372300ace8311564286b4b827dfb15def13071e86383809463cd60275102139_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8efbf2da142d24a1d4613a77f1dfe71b0be2c8c49aedef4d30a00ca62b32aa2a_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b0170f5f2a06fbf06e6c9b8a3aa6c9cb688c1934c1c6f8c3205e2b726024d9d9_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:73b359fbdf2c41877502c8eb795aeae868a9093b4358ab3ee6aa90e15e7873b2_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:70453cda0ffc3424177410281d43b0671eeb5bfde6e4294e2ec28d71653f68b7_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:76486b5692ce55d8b00f61d28cf60e6917a8dc878d8cf6788f170184ffd21839_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:98db286472d5466d241779d0082b57315ff752827761b287993393fa89e369c1_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:a48bd2e1b73405629fe476f83dbb9c707099b42a9d1ef824941ced101a42ff50_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2cd4f2e7687f9631565357bd5b875f70ed856e4b335c201505e6dc57c679af6d_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:62d939562320165babf6b42bb07b1d69d71a5ada621f4beda36a7cdbf41ca452_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:a3e274a01780864f4fa58cc8e3340cc36168968c980b358d2d718d82818b7705_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:e0a36f410898d1ee979dffae62709839d5df6da9643b9cf6074ab3406078fc5c_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:58cf1dac74338e0db4751c90707f4b1c3d93cd6b2d2cb02695e17c4e84f5f5fa_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:65083d63d2413e2d9ff635f7e5a8062ea668fd4c8155d32c787d6f01b473be0a_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:77eed66a0b274ab229ae986813879d1c2f203cbb16623910160d359b05893ec3_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:90c42f2bdbcd27ea4fa0c4dbd55af121b67a0ea7540ebaad30a6ca20a6c3b498_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:20639404ef198fb65a9cad2ccdf07a0ef7383b031ec302472852ceca732f0689_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:acc3365766546d7ee81ca555c78cb2f46856d868efb0a3e7d60511ee5feb2f0f_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:b4350e929666ac7580d6672b4962062b836b82126566d40376da39da3a6c557c_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:bf37ef2edbda7e52c8a54773039bc2058429b61ec95ca6d21a9c39e706db6ca7_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:42b644586b27110dcdc4df205ca5944faf57fe07526acbd1b2f41b70c3e351a1_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:9a7d564ede6c8191fa7e92da021a93978d45f143d5ebfb77ae2eea8761c0af55_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:9af8fdccfbfb9f96191db3d3b6045eb1ffc9f2c320079d2841d0f28e728e0b35_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b2202c1817f1ddaac354bbd0f432e2086bcdfe46543d63e5339356696deb7de5_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:5351f576c10e79f668e11b8287c8333df95b26a36a77db74dd0a3f5376077c06_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:842d95108842a05c1310f514ebb3b6b93471a093c0f923f827638025c1879795_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:868aef34bf4b6afc9dd353ae5b66834707250b6d003f458da03ed12f1947eb9f_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:c7b1f910847ee333768cb947738e9eb34abfec1397ea346eafa289094d229f1c_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:349c911c5bc5fbb5ea0000b2c939eed2ba2e190f911d2549bc554295176b2b42_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:4875990d931e8aec312b8f983bfefe3a635e4b94fc0e124bf0aae09b62ac6b6f_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:79d4fc632872c0318156f5618d24c3786960fb7393abb25d9ec01208709610eb_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:c57650cde2f0d81539f67d31011468cf04af38c2f7e0b57e12988da4c455cb15_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:019c2e3c17a20166f3c207caca8c6b26a83c93e57141e4bf75553df6586d7a8a_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:58a3da4874df410cf9d5ad99db7ba87bd07144206388f408d9fbf1ebc95f9c03_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:5b89406f5817450acfe562d5006c1c00a8443ef8f4b9eee6326a7279420c3495_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:b9106f58d8ba6143393e1494e0f7d651d1360719e3c38b24005080981bfd27dc_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:4782aa11b8230e56729ec9bccfc4895a3343f7a42e24493b79b87eea09dd1da2_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:923ee684d8c97393b704e525c6ad4965df090c68ad1055d4a78323aea385ca18_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b0068fc5b41442eed9a545433553e2750c9bb150dd609568b8176e01603f7640_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:e974db96e70635d7a08bd1432903b0b6a9822702bda62015a8f96d2a59e2091c_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:0933ff0b400ed79c993a6175388eb5e251bcf50d401f64c7834d43733ad6ba93_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:96a023f63099eb8384a5cc77cd0abc7cb8e758c29d73d3ccb1a3e7e8dce32968_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:c049f1264a2b594ab78aee1edf308e01a55d3389bd333f304ba3470db4d1a898_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:f47e3ed2d1628242792cf4ccbf12d27c287a2598c73645a58e651c6880c55806_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6a6e33ae6d021bd2926eabe45a9128872036d981361c24b871002bc7a5305d12_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:926c07a18734c82bc5185cb8003aeeceeddfe55b793a430a48788c29be77c534_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:c48482927e28fcdc950a0d0e2761ffd992a37489cf3490e65250eb0828e205e0_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:cf73e3a3588ac1fef8363ae99b6b8cd7c05f8beac49f187210c506fd0c603867_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:14bddb6185b655aa31cf17ce23069c4ca921cdf2caea296b59cd7033e92d0590_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1c6c2ea48c21315a82362059ddf72e6d39f1b74e5f247ffbe5dfccbc489899d9_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:75f3cfee21c647347a00ed370bf48a37c5b91d86895bd357ea4f99c4571cab39_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:9361daf08d52df508e31c34d8989b1b588722ca557ba559913ce1a7b457c2953_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:54487b1509a0e951b74d30953a3732aa1adbf30e2c42fcacd3097667c277917d_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:59a71e223a49140412f052606c790bea160795ebb7b641a6de3001da7068e0b0_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:77d5053f790356decfbaa8fb249896858629fb2841a2afec64e527b4f4239439_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f2b285b37154654fb219227d42a5016327a13f99e0a5a0d9c04e29acb97f6fe9_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:2f479a222750e381a350390a7409bddf8b7be82b84702d49fc88a066b6d7f579_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:d934b23a365583a2278e953b9caac94415a187cab398a671376e710d3848d960_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:e6b757f955568b429df8c11e5ea5d7307b7a31b76d062f4461b67837eb9883f1_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:f1ada4311455e4ad9fa66b5f702abe188cf85d06907580d3fcaa6a0628b11fb2_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:0faed089022b06e67e0013d6fd171d1495117f7081ab0432492a04ec0162e22b_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:13eb206e1b9444217978c0895cabd4a54c6c7976cad6aadc4d8191fbf95513f9_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:29b4ce69fe85e81609e6ca7913a54f198c71f59cb0dbcc2aa6802c4d237c28bd_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:85668b4b3e5e91df4056702faf71a7981a6d9b1f77dac9b3c276288a2ddf0871_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:5a6420e67fa2ccc567e7421072ba1a6a3820ad3e964cef9d4ab09dfd02f34e30_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:bfcaee36b5c4b7a5e28f805a8063dcd9b7184cd633e042e4721a4313c36f2e82_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:d025df3add1287645833ef66bc9c992f08a9263cb9f48365ba82731fcefc5108_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:d1bd1dc3dc47bbed345db1cf76958104d23f3f1a23961f1f65e19c910aebeaf8_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:1b37ddf287b032e4ffe62096b1bebd03d6e1b955a983e3cb59d22f2c3fa8c6c9_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:3052464455752660000d20685dbb087544f2b60bbcf4c768e2e831c6f8777b1f_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:cf0fba7f83930c5b402de0af6335d950e5901219ab434c124eac73061a014354_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:f5895ae776750ed7b835825abc2b2ae0091462233c48f91bace88da473f9b0b6_s390x	—	Workaround

Threats

Impact Important

CVE-2026-33818

A flaw was found in the `encoding/asn1` package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One (ASN.1) structure, leading to excessive recursion during the `Unmarshal` operation. This could result in stack exhaustion and a Denial of Service (DoS) condition.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-776 - Improper Restriction of Recursive Entity References in DTDs

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:71bb4ed581f561262b23378f567e6b6c783c4d06c6958e42b906ca483ca78c93_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:9ac39e9d927feeccad720d8df32e8ad846a71901f6a252f6fc2458a0ed17c968_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b809d399db0cc42ca196365b4378e980d79f76d5957b6ba5d5c5660a71e49eb6_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:eb2d75c47058bbfcde2954ac6da8c1972c5de064cb3d7cc2673ad416d932d6fe_s390x	—	Vendor Fix fix Workaround

Known not affected 93 products

Product	Version	Remediation
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:128cdae616cbd3b5c2c968b22485d7be0f051a4d7a2607c119d503849270db5e_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6372300ace8311564286b4b827dfb15def13071e86383809463cd60275102139_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8efbf2da142d24a1d4613a77f1dfe71b0be2c8c49aedef4d30a00ca62b32aa2a_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b0170f5f2a06fbf06e6c9b8a3aa6c9cb688c1934c1c6f8c3205e2b726024d9d9_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:73b359fbdf2c41877502c8eb795aeae868a9093b4358ab3ee6aa90e15e7873b2_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:443fa9ebb6ac2ca2c840842d6679479fc5955464908e261d44177569eff9c8af_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:49be19a20112c2ca843ea67c984fd880ab18911ef3b8757ea05961fb7379b3c3_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:7c939c36153a034eb48b6d6269905bba69ba3991c50e2904f7e943ee5ad6ba57_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:86c1cd15321eaee9004490e5abbc4c3b766518d488e924981f61bcb70c135876_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:70453cda0ffc3424177410281d43b0671eeb5bfde6e4294e2ec28d71653f68b7_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:76486b5692ce55d8b00f61d28cf60e6917a8dc878d8cf6788f170184ffd21839_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:98db286472d5466d241779d0082b57315ff752827761b287993393fa89e369c1_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:a48bd2e1b73405629fe476f83dbb9c707099b42a9d1ef824941ced101a42ff50_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2cd4f2e7687f9631565357bd5b875f70ed856e4b335c201505e6dc57c679af6d_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:62d939562320165babf6b42bb07b1d69d71a5ada621f4beda36a7cdbf41ca452_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:a3e274a01780864f4fa58cc8e3340cc36168968c980b358d2d718d82818b7705_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:e0a36f410898d1ee979dffae62709839d5df6da9643b9cf6074ab3406078fc5c_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:58cf1dac74338e0db4751c90707f4b1c3d93cd6b2d2cb02695e17c4e84f5f5fa_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:65083d63d2413e2d9ff635f7e5a8062ea668fd4c8155d32c787d6f01b473be0a_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:77eed66a0b274ab229ae986813879d1c2f203cbb16623910160d359b05893ec3_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:90c42f2bdbcd27ea4fa0c4dbd55af121b67a0ea7540ebaad30a6ca20a6c3b498_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:20639404ef198fb65a9cad2ccdf07a0ef7383b031ec302472852ceca732f0689_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:acc3365766546d7ee81ca555c78cb2f46856d868efb0a3e7d60511ee5feb2f0f_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:b4350e929666ac7580d6672b4962062b836b82126566d40376da39da3a6c557c_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:bf37ef2edbda7e52c8a54773039bc2058429b61ec95ca6d21a9c39e706db6ca7_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:42b644586b27110dcdc4df205ca5944faf57fe07526acbd1b2f41b70c3e351a1_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:9a7d564ede6c8191fa7e92da021a93978d45f143d5ebfb77ae2eea8761c0af55_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:9af8fdccfbfb9f96191db3d3b6045eb1ffc9f2c320079d2841d0f28e728e0b35_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b2202c1817f1ddaac354bbd0f432e2086bcdfe46543d63e5339356696deb7de5_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:5351f576c10e79f668e11b8287c8333df95b26a36a77db74dd0a3f5376077c06_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:842d95108842a05c1310f514ebb3b6b93471a093c0f923f827638025c1879795_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:868aef34bf4b6afc9dd353ae5b66834707250b6d003f458da03ed12f1947eb9f_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:c7b1f910847ee333768cb947738e9eb34abfec1397ea346eafa289094d229f1c_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:349c911c5bc5fbb5ea0000b2c939eed2ba2e190f911d2549bc554295176b2b42_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:4875990d931e8aec312b8f983bfefe3a635e4b94fc0e124bf0aae09b62ac6b6f_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:79d4fc632872c0318156f5618d24c3786960fb7393abb25d9ec01208709610eb_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:c57650cde2f0d81539f67d31011468cf04af38c2f7e0b57e12988da4c455cb15_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:019c2e3c17a20166f3c207caca8c6b26a83c93e57141e4bf75553df6586d7a8a_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:58a3da4874df410cf9d5ad99db7ba87bd07144206388f408d9fbf1ebc95f9c03_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:5b89406f5817450acfe562d5006c1c00a8443ef8f4b9eee6326a7279420c3495_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:b9106f58d8ba6143393e1494e0f7d651d1360719e3c38b24005080981bfd27dc_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:4782aa11b8230e56729ec9bccfc4895a3343f7a42e24493b79b87eea09dd1da2_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:923ee684d8c97393b704e525c6ad4965df090c68ad1055d4a78323aea385ca18_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b0068fc5b41442eed9a545433553e2750c9bb150dd609568b8176e01603f7640_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:e974db96e70635d7a08bd1432903b0b6a9822702bda62015a8f96d2a59e2091c_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:0933ff0b400ed79c993a6175388eb5e251bcf50d401f64c7834d43733ad6ba93_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:96a023f63099eb8384a5cc77cd0abc7cb8e758c29d73d3ccb1a3e7e8dce32968_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:c049f1264a2b594ab78aee1edf308e01a55d3389bd333f304ba3470db4d1a898_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:f47e3ed2d1628242792cf4ccbf12d27c287a2598c73645a58e651c6880c55806_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6a6e33ae6d021bd2926eabe45a9128872036d981361c24b871002bc7a5305d12_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:926c07a18734c82bc5185cb8003aeeceeddfe55b793a430a48788c29be77c534_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:c48482927e28fcdc950a0d0e2761ffd992a37489cf3490e65250eb0828e205e0_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:cf73e3a3588ac1fef8363ae99b6b8cd7c05f8beac49f187210c506fd0c603867_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:14bddb6185b655aa31cf17ce23069c4ca921cdf2caea296b59cd7033e92d0590_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1c6c2ea48c21315a82362059ddf72e6d39f1b74e5f247ffbe5dfccbc489899d9_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:75f3cfee21c647347a00ed370bf48a37c5b91d86895bd357ea4f99c4571cab39_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:9361daf08d52df508e31c34d8989b1b588722ca557ba559913ce1a7b457c2953_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:4c4d34cb5d409591bde12c9d5610f746e3dad1d460d3fea9c613d0ae3f81d64f_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:602869c79b8b43e72a7e940c8bb088d91ecc1a448dd8c529baf3440ea9287559_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:90be25d82b8831bcd2baa1e5b2e37bf0c231e882885a1b568592dfb91bc58abf_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:db28988ba5225106449a05224d019cd25897385854230b7e39c7e3e4521093bd_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:06d3e779706d1187ecf1028b21883cb3d140a4357f8807dc8b8f011aad6f7f31_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:25d19e097b5ae0bc0d9e8f918bb5f1015ccdf77eb6d93350d3f0bcf1d7ee7937_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:3261677cb85bf9a87e4dc134396b71943e2e76821d0e35d7f8ddfa0cb4059140_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:e0f529589bf67cd7368bac7a2edb3c2e21423249c0514cff5e52e81c2b9fa11e_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:5b46489d5cea06c76497c5c8fcc535ad807b1c76734e493d0e066e23aec373ad_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:85f18ee14b931d2df20cd7b694467c53cf40864a057bc790b67b547fdd8beb39_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:b0281c14e6eb30e6ada9224f1c56c01bb101362adaecf46a9143245dd6c32b8c_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:ffd398dc9520463d713db4e2e1aefc6a6bb6c7b03694b69273f7296705ea51e2_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:54487b1509a0e951b74d30953a3732aa1adbf30e2c42fcacd3097667c277917d_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:59a71e223a49140412f052606c790bea160795ebb7b641a6de3001da7068e0b0_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:77d5053f790356decfbaa8fb249896858629fb2841a2afec64e527b4f4239439_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f2b285b37154654fb219227d42a5016327a13f99e0a5a0d9c04e29acb97f6fe9_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:2f479a222750e381a350390a7409bddf8b7be82b84702d49fc88a066b6d7f579_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:d934b23a365583a2278e953b9caac94415a187cab398a671376e710d3848d960_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:e6b757f955568b429df8c11e5ea5d7307b7a31b76d062f4461b67837eb9883f1_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:f1ada4311455e4ad9fa66b5f702abe188cf85d06907580d3fcaa6a0628b11fb2_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:27c2265f15c17641f0ba8743270b87e21ef0b9c85d50b48284a4450e7a7c67e7_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:76dc19b8923e825e0a50e32c59228c1b42827e770fbbc561a8f08a2fcd4722fa_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:b8f7cb6561e0577c0b5e06bd0304e00d7ae953dab395faa8928f5f21902afefd_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:c59180d8ab63901671ef112914eb38ccde6fc1649432cb7028e9282fe03409ec_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:0faed089022b06e67e0013d6fd171d1495117f7081ab0432492a04ec0162e22b_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:13eb206e1b9444217978c0895cabd4a54c6c7976cad6aadc4d8191fbf95513f9_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:29b4ce69fe85e81609e6ca7913a54f198c71f59cb0dbcc2aa6802c4d237c28bd_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:85668b4b3e5e91df4056702faf71a7981a6d9b1f77dac9b3c276288a2ddf0871_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:5a6420e67fa2ccc567e7421072ba1a6a3820ad3e964cef9d4ab09dfd02f34e30_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:bfcaee36b5c4b7a5e28f805a8063dcd9b7184cd633e042e4721a4313c36f2e82_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:d025df3add1287645833ef66bc9c992f08a9263cb9f48365ba82731fcefc5108_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:d1bd1dc3dc47bbed345db1cf76958104d23f3f1a23961f1f65e19c910aebeaf8_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:1b37ddf287b032e4ffe62096b1bebd03d6e1b955a983e3cb59d22f2c3fa8c6c9_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:3052464455752660000d20685dbb087544f2b60bbcf4c768e2e831c6f8777b1f_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:cf0fba7f83930c5b402de0af6335d950e5901219ab434c124eac73061a014354_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:f5895ae776750ed7b835825abc2b2ae0091462233c48f91bace88da473f9b0b6_s390x	—	Workaround

Threats

Impact Important

CVE-2026-39821

A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.

8.2 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N

CWE-1289 - Improper Validation of Unsafe Equivalence in Input

Affected products

Fixed 8 products

Product	Version	Remediation
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:4c4d34cb5d409591bde12c9d5610f746e3dad1d460d3fea9c613d0ae3f81d64f_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:602869c79b8b43e72a7e940c8bb088d91ecc1a448dd8c529baf3440ea9287559_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:90be25d82b8831bcd2baa1e5b2e37bf0c231e882885a1b568592dfb91bc58abf_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:db28988ba5225106449a05224d019cd25897385854230b7e39c7e3e4521093bd_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:06d3e779706d1187ecf1028b21883cb3d140a4357f8807dc8b8f011aad6f7f31_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:25d19e097b5ae0bc0d9e8f918bb5f1015ccdf77eb6d93350d3f0bcf1d7ee7937_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:3261677cb85bf9a87e4dc134396b71943e2e76821d0e35d7f8ddfa0cb4059140_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:e0f529589bf67cd7368bac7a2edb3c2e21423249c0514cff5e52e81c2b9fa11e_ppc64le	—	Vendor Fix fix Workaround

Known not affected 89 products

Product	Version	Remediation
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:71bb4ed581f561262b23378f567e6b6c783c4d06c6958e42b906ca483ca78c93_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:9ac39e9d927feeccad720d8df32e8ad846a71901f6a252f6fc2458a0ed17c968_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b809d399db0cc42ca196365b4378e980d79f76d5957b6ba5d5c5660a71e49eb6_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:eb2d75c47058bbfcde2954ac6da8c1972c5de064cb3d7cc2673ad416d932d6fe_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:128cdae616cbd3b5c2c968b22485d7be0f051a4d7a2607c119d503849270db5e_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6372300ace8311564286b4b827dfb15def13071e86383809463cd60275102139_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8efbf2da142d24a1d4613a77f1dfe71b0be2c8c49aedef4d30a00ca62b32aa2a_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b0170f5f2a06fbf06e6c9b8a3aa6c9cb688c1934c1c6f8c3205e2b726024d9d9_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:73b359fbdf2c41877502c8eb795aeae868a9093b4358ab3ee6aa90e15e7873b2_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:443fa9ebb6ac2ca2c840842d6679479fc5955464908e261d44177569eff9c8af_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:49be19a20112c2ca843ea67c984fd880ab18911ef3b8757ea05961fb7379b3c3_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:7c939c36153a034eb48b6d6269905bba69ba3991c50e2904f7e943ee5ad6ba57_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:86c1cd15321eaee9004490e5abbc4c3b766518d488e924981f61bcb70c135876_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:70453cda0ffc3424177410281d43b0671eeb5bfde6e4294e2ec28d71653f68b7_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:76486b5692ce55d8b00f61d28cf60e6917a8dc878d8cf6788f170184ffd21839_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:98db286472d5466d241779d0082b57315ff752827761b287993393fa89e369c1_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:a48bd2e1b73405629fe476f83dbb9c707099b42a9d1ef824941ced101a42ff50_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2cd4f2e7687f9631565357bd5b875f70ed856e4b335c201505e6dc57c679af6d_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:62d939562320165babf6b42bb07b1d69d71a5ada621f4beda36a7cdbf41ca452_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:a3e274a01780864f4fa58cc8e3340cc36168968c980b358d2d718d82818b7705_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:e0a36f410898d1ee979dffae62709839d5df6da9643b9cf6074ab3406078fc5c_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:58cf1dac74338e0db4751c90707f4b1c3d93cd6b2d2cb02695e17c4e84f5f5fa_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:65083d63d2413e2d9ff635f7e5a8062ea668fd4c8155d32c787d6f01b473be0a_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:77eed66a0b274ab229ae986813879d1c2f203cbb16623910160d359b05893ec3_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:90c42f2bdbcd27ea4fa0c4dbd55af121b67a0ea7540ebaad30a6ca20a6c3b498_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:20639404ef198fb65a9cad2ccdf07a0ef7383b031ec302472852ceca732f0689_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:acc3365766546d7ee81ca555c78cb2f46856d868efb0a3e7d60511ee5feb2f0f_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:b4350e929666ac7580d6672b4962062b836b82126566d40376da39da3a6c557c_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:bf37ef2edbda7e52c8a54773039bc2058429b61ec95ca6d21a9c39e706db6ca7_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:42b644586b27110dcdc4df205ca5944faf57fe07526acbd1b2f41b70c3e351a1_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:9a7d564ede6c8191fa7e92da021a93978d45f143d5ebfb77ae2eea8761c0af55_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:9af8fdccfbfb9f96191db3d3b6045eb1ffc9f2c320079d2841d0f28e728e0b35_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b2202c1817f1ddaac354bbd0f432e2086bcdfe46543d63e5339356696deb7de5_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:5351f576c10e79f668e11b8287c8333df95b26a36a77db74dd0a3f5376077c06_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:842d95108842a05c1310f514ebb3b6b93471a093c0f923f827638025c1879795_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:868aef34bf4b6afc9dd353ae5b66834707250b6d003f458da03ed12f1947eb9f_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:c7b1f910847ee333768cb947738e9eb34abfec1397ea346eafa289094d229f1c_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:349c911c5bc5fbb5ea0000b2c939eed2ba2e190f911d2549bc554295176b2b42_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:4875990d931e8aec312b8f983bfefe3a635e4b94fc0e124bf0aae09b62ac6b6f_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:79d4fc632872c0318156f5618d24c3786960fb7393abb25d9ec01208709610eb_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:c57650cde2f0d81539f67d31011468cf04af38c2f7e0b57e12988da4c455cb15_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:019c2e3c17a20166f3c207caca8c6b26a83c93e57141e4bf75553df6586d7a8a_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:58a3da4874df410cf9d5ad99db7ba87bd07144206388f408d9fbf1ebc95f9c03_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:5b89406f5817450acfe562d5006c1c00a8443ef8f4b9eee6326a7279420c3495_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:b9106f58d8ba6143393e1494e0f7d651d1360719e3c38b24005080981bfd27dc_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:4782aa11b8230e56729ec9bccfc4895a3343f7a42e24493b79b87eea09dd1da2_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:923ee684d8c97393b704e525c6ad4965df090c68ad1055d4a78323aea385ca18_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b0068fc5b41442eed9a545433553e2750c9bb150dd609568b8176e01603f7640_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:e974db96e70635d7a08bd1432903b0b6a9822702bda62015a8f96d2a59e2091c_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:0933ff0b400ed79c993a6175388eb5e251bcf50d401f64c7834d43733ad6ba93_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:96a023f63099eb8384a5cc77cd0abc7cb8e758c29d73d3ccb1a3e7e8dce32968_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:c049f1264a2b594ab78aee1edf308e01a55d3389bd333f304ba3470db4d1a898_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:f47e3ed2d1628242792cf4ccbf12d27c287a2598c73645a58e651c6880c55806_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6a6e33ae6d021bd2926eabe45a9128872036d981361c24b871002bc7a5305d12_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:926c07a18734c82bc5185cb8003aeeceeddfe55b793a430a48788c29be77c534_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:c48482927e28fcdc950a0d0e2761ffd992a37489cf3490e65250eb0828e205e0_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:cf73e3a3588ac1fef8363ae99b6b8cd7c05f8beac49f187210c506fd0c603867_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:14bddb6185b655aa31cf17ce23069c4ca921cdf2caea296b59cd7033e92d0590_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1c6c2ea48c21315a82362059ddf72e6d39f1b74e5f247ffbe5dfccbc489899d9_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:75f3cfee21c647347a00ed370bf48a37c5b91d86895bd357ea4f99c4571cab39_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:9361daf08d52df508e31c34d8989b1b588722ca557ba559913ce1a7b457c2953_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:5b46489d5cea06c76497c5c8fcc535ad807b1c76734e493d0e066e23aec373ad_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:85f18ee14b931d2df20cd7b694467c53cf40864a057bc790b67b547fdd8beb39_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:b0281c14e6eb30e6ada9224f1c56c01bb101362adaecf46a9143245dd6c32b8c_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:ffd398dc9520463d713db4e2e1aefc6a6bb6c7b03694b69273f7296705ea51e2_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:54487b1509a0e951b74d30953a3732aa1adbf30e2c42fcacd3097667c277917d_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:59a71e223a49140412f052606c790bea160795ebb7b641a6de3001da7068e0b0_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:77d5053f790356decfbaa8fb249896858629fb2841a2afec64e527b4f4239439_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f2b285b37154654fb219227d42a5016327a13f99e0a5a0d9c04e29acb97f6fe9_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:2f479a222750e381a350390a7409bddf8b7be82b84702d49fc88a066b6d7f579_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:d934b23a365583a2278e953b9caac94415a187cab398a671376e710d3848d960_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:e6b757f955568b429df8c11e5ea5d7307b7a31b76d062f4461b67837eb9883f1_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:f1ada4311455e4ad9fa66b5f702abe188cf85d06907580d3fcaa6a0628b11fb2_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:27c2265f15c17641f0ba8743270b87e21ef0b9c85d50b48284a4450e7a7c67e7_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:76dc19b8923e825e0a50e32c59228c1b42827e770fbbc561a8f08a2fcd4722fa_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:b8f7cb6561e0577c0b5e06bd0304e00d7ae953dab395faa8928f5f21902afefd_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:c59180d8ab63901671ef112914eb38ccde6fc1649432cb7028e9282fe03409ec_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:0faed089022b06e67e0013d6fd171d1495117f7081ab0432492a04ec0162e22b_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:13eb206e1b9444217978c0895cabd4a54c6c7976cad6aadc4d8191fbf95513f9_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:29b4ce69fe85e81609e6ca7913a54f198c71f59cb0dbcc2aa6802c4d237c28bd_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:85668b4b3e5e91df4056702faf71a7981a6d9b1f77dac9b3c276288a2ddf0871_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:5a6420e67fa2ccc567e7421072ba1a6a3820ad3e964cef9d4ab09dfd02f34e30_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:bfcaee36b5c4b7a5e28f805a8063dcd9b7184cd633e042e4721a4313c36f2e82_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:d025df3add1287645833ef66bc9c992f08a9263cb9f48365ba82731fcefc5108_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:d1bd1dc3dc47bbed345db1cf76958104d23f3f1a23961f1f65e19c910aebeaf8_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:1b37ddf287b032e4ffe62096b1bebd03d6e1b955a983e3cb59d22f2c3fa8c6c9_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:3052464455752660000d20685dbb087544f2b60bbcf4c768e2e831c6f8777b1f_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:cf0fba7f83930c5b402de0af6335d950e5901219ab434c124eac73061a014354_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:f5895ae776750ed7b835825abc2b2ae0091462233c48f91bace88da473f9b0b6_s390x	—	Workaround

Threats

Impact Important

CVE-2026-39822

A flaw was found in the `os.Root` functionality of Go on Unix systems. This vulnerability allows an attacker to bypass intended directory restrictions by crafting a path that ends with a symbolic link and a trailing slash. When a file is opened in `os.Root` with such a path, the symbolic link is improperly followed, potentially leading to access to locations outside of the defined root directory. This could result in information disclosure or unauthorized file system access.

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-59 - Improper Link Resolution Before File Access

Affected products

Fixed 4 products, the same list as for CVE-2026-33818

Known not affected 93 products, the same list as for CVE-2026-33818

Threats

Impact Important

CVE-2026-39834

A flaw was found in golang.org/x/crypto/ssh. When a remote attacker attempts to write data larger than 4GB in a single call on an SSH (Secure Shell) channel, an integer overflow occurs in the internal payload size calculation. This vulnerability causes the write loop to spin indefinitely, continuously sending empty packets without making progress. The primary consequence is a denial of service (DoS), as the affected system consumes resources and prevents legitimate data transfer.

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-190 - Integer Overflow or Wraparound

Affected products

Fixed 8 products

Product	Version	Remediation
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:54487b1509a0e951b74d30953a3732aa1adbf30e2c42fcacd3097667c277917d_arm64	—	Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:59a71e223a49140412f052606c790bea160795ebb7b641a6de3001da7068e0b0_amd64	—	Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:77d5053f790356decfbaa8fb249896858629fb2841a2afec64e527b4f4239439_ppc64le	—	Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f2b285b37154654fb219227d42a5016327a13f99e0a5a0d9c04e29acb97f6fe9_s390x	—	Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:2f479a222750e381a350390a7409bddf8b7be82b84702d49fc88a066b6d7f579_ppc64le	—	Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:d934b23a365583a2278e953b9caac94415a187cab398a671376e710d3848d960_amd64	—	Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:e6b757f955568b429df8c11e5ea5d7307b7a31b76d062f4461b67837eb9883f1_s390x	—	Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:f1ada4311455e4ad9fa66b5f702abe188cf85d06907580d3fcaa6a0628b11fb2_arm64	—	Vendor Fix fix

Known not affected 89 products

Product	Identifier	Version	Remediation
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:71bb4ed581f561262b23378f567e6b6c783c4d06c6958e42b906ca483ca78c93_ppc64le		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:9ac39e9d927feeccad720d8df32e8ad846a71901f6a252f6fc2458a0ed17c968_arm64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b809d399db0cc42ca196365b4378e980d79f76d5957b6ba5d5c5660a71e49eb6_amd64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:eb2d75c47058bbfcde2954ac6da8c1972c5de064cb3d7cc2673ad416d932d6fe_s390x		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:128cdae616cbd3b5c2c968b22485d7be0f051a4d7a2607c119d503849270db5e_arm64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6372300ace8311564286b4b827dfb15def13071e86383809463cd60275102139_ppc64le		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8efbf2da142d24a1d4613a77f1dfe71b0be2c8c49aedef4d30a00ca62b32aa2a_amd64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b0170f5f2a06fbf06e6c9b8a3aa6c9cb688c1934c1c6f8c3205e2b726024d9d9_s390x		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:73b359fbdf2c41877502c8eb795aeae868a9093b4358ab3ee6aa90e15e7873b2_amd64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:443fa9ebb6ac2ca2c840842d6679479fc5955464908e261d44177569eff9c8af_s390x		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:49be19a20112c2ca843ea67c984fd880ab18911ef3b8757ea05961fb7379b3c3_amd64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:7c939c36153a034eb48b6d6269905bba69ba3991c50e2904f7e943ee5ad6ba57_ppc64le		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:86c1cd15321eaee9004490e5abbc4c3b766518d488e924981f61bcb70c135876_arm64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:70453cda0ffc3424177410281d43b0671eeb5bfde6e4294e2ec28d71653f68b7_ppc64le		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:76486b5692ce55d8b00f61d28cf60e6917a8dc878d8cf6788f170184ffd21839_arm64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:98db286472d5466d241779d0082b57315ff752827761b287993393fa89e369c1_amd64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:a48bd2e1b73405629fe476f83dbb9c707099b42a9d1ef824941ced101a42ff50_s390x		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2cd4f2e7687f9631565357bd5b875f70ed856e4b335c201505e6dc57c679af6d_arm64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:62d939562320165babf6b42bb07b1d69d71a5ada621f4beda36a7cdbf41ca452_ppc64le		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:a3e274a01780864f4fa58cc8e3340cc36168968c980b358d2d718d82818b7705_s390x		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:e0a36f410898d1ee979dffae62709839d5df6da9643b9cf6074ab3406078fc5c_amd64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:58cf1dac74338e0db4751c90707f4b1c3d93cd6b2d2cb02695e17c4e84f5f5fa_arm64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:65083d63d2413e2d9ff635f7e5a8062ea668fd4c8155d32c787d6f01b473be0a_ppc64le		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:77eed66a0b274ab229ae986813879d1c2f203cbb16623910160d359b05893ec3_s390x		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:90c42f2bdbcd27ea4fa0c4dbd55af121b67a0ea7540ebaad30a6ca20a6c3b498_amd64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:20639404ef198fb65a9cad2ccdf07a0ef7383b031ec302472852ceca732f0689_ppc64le		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:acc3365766546d7ee81ca555c78cb2f46856d868efb0a3e7d60511ee5feb2f0f_amd64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:b4350e929666ac7580d6672b4962062b836b82126566d40376da39da3a6c557c_s390x		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:bf37ef2edbda7e52c8a54773039bc2058429b61ec95ca6d21a9c39e706db6ca7_arm64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:42b644586b27110dcdc4df205ca5944faf57fe07526acbd1b2f41b70c3e351a1_s390x		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:9a7d564ede6c8191fa7e92da021a93978d45f143d5ebfb77ae2eea8761c0af55_ppc64le		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:9af8fdccfbfb9f96191db3d3b6045eb1ffc9f2c320079d2841d0f28e728e0b35_arm64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b2202c1817f1ddaac354bbd0f432e2086bcdfe46543d63e5339356696deb7de5_amd64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:5351f576c10e79f668e11b8287c8333df95b26a36a77db74dd0a3f5376077c06_arm64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:842d95108842a05c1310f514ebb3b6b93471a093c0f923f827638025c1879795_s390x		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:868aef34bf4b6afc9dd353ae5b66834707250b6d003f458da03ed12f1947eb9f_amd64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:c7b1f910847ee333768cb947738e9eb34abfec1397ea346eafa289094d229f1c_ppc64le		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:349c911c5bc5fbb5ea0000b2c939eed2ba2e190f911d2549bc554295176b2b42_arm64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:4875990d931e8aec312b8f983bfefe3a635e4b94fc0e124bf0aae09b62ac6b6f_ppc64le		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:79d4fc632872c0318156f5618d24c3786960fb7393abb25d9ec01208709610eb_s390x		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:c57650cde2f0d81539f67d31011468cf04af38c2f7e0b57e12988da4c455cb15_amd64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:019c2e3c17a20166f3c207caca8c6b26a83c93e57141e4bf75553df6586d7a8a_amd64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:58a3da4874df410cf9d5ad99db7ba87bd07144206388f408d9fbf1ebc95f9c03_s390x		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:5b89406f5817450acfe562d5006c1c00a8443ef8f4b9eee6326a7279420c3495_arm64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:b9106f58d8ba6143393e1494e0f7d651d1360719e3c38b24005080981bfd27dc_ppc64le		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:4782aa11b8230e56729ec9bccfc4895a3343f7a42e24493b79b87eea09dd1da2_arm64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:923ee684d8c97393b704e525c6ad4965df090c68ad1055d4a78323aea385ca18_amd64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b0068fc5b41442eed9a545433553e2750c9bb150dd609568b8176e01603f7640_ppc64le		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:e974db96e70635d7a08bd1432903b0b6a9822702bda62015a8f96d2a59e2091c_s390x		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:0933ff0b400ed79c993a6175388eb5e251bcf50d401f64c7834d43733ad6ba93_ppc64le		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:96a023f63099eb8384a5cc77cd0abc7cb8e758c29d73d3ccb1a3e7e8dce32968_arm64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:c049f1264a2b594ab78aee1edf308e01a55d3389bd333f304ba3470db4d1a898_amd64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:f47e3ed2d1628242792cf4ccbf12d27c287a2598c73645a58e651c6880c55806_s390x		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6a6e33ae6d021bd2926eabe45a9128872036d981361c24b871002bc7a5305d12_amd64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:926c07a18734c82bc5185cb8003aeeceeddfe55b793a430a48788c29be77c534_s390x		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:c48482927e28fcdc950a0d0e2761ffd992a37489cf3490e65250eb0828e205e0_ppc64le		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:cf73e3a3588ac1fef8363ae99b6b8cd7c05f8beac49f187210c506fd0c603867_arm64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:14bddb6185b655aa31cf17ce23069c4ca921cdf2caea296b59cd7033e92d0590_amd64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1c6c2ea48c21315a82362059ddf72e6d39f1b74e5f247ffbe5dfccbc489899d9_s390x		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:75f3cfee21c647347a00ed370bf48a37c5b91d86895bd357ea4f99c4571cab39_ppc64le		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:9361daf08d52df508e31c34d8989b1b588722ca557ba559913ce1a7b457c2953_arm64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:4c4d34cb5d409591bde12c9d5610f746e3dad1d460d3fea9c613d0ae3f81d64f_ppc64le		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:602869c79b8b43e72a7e940c8bb088d91ecc1a448dd8c529baf3440ea9287559_arm64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:90be25d82b8831bcd2baa1e5b2e37bf0c231e882885a1b568592dfb91bc58abf_amd64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:db28988ba5225106449a05224d019cd25897385854230b7e39c7e3e4521093bd_s390x		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:06d3e779706d1187ecf1028b21883cb3d140a4357f8807dc8b8f011aad6f7f31_arm64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:25d19e097b5ae0bc0d9e8f918bb5f1015ccdf77eb6d93350d3f0bcf1d7ee7937_amd64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:3261677cb85bf9a87e4dc134396b71943e2e76821d0e35d7f8ddfa0cb4059140_s390x		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:e0f529589bf67cd7368bac7a2edb3c2e21423249c0514cff5e52e81c2b9fa11e_ppc64le		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:5b46489d5cea06c76497c5c8fcc535ad807b1c76734e493d0e066e23aec373ad_amd64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:85f18ee14b931d2df20cd7b694467c53cf40864a057bc790b67b547fdd8beb39_s390x		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:b0281c14e6eb30e6ada9224f1c56c01bb101362adaecf46a9143245dd6c32b8c_arm64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:ffd398dc9520463d713db4e2e1aefc6a6bb6c7b03694b69273f7296705ea51e2_ppc64le		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:27c2265f15c17641f0ba8743270b87e21ef0b9c85d50b48284a4450e7a7c67e7_ppc64le		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:76dc19b8923e825e0a50e32c59228c1b42827e770fbbc561a8f08a2fcd4722fa_amd64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:b8f7cb6561e0577c0b5e06bd0304e00d7ae953dab395faa8928f5f21902afefd_s390x		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:c59180d8ab63901671ef112914eb38ccde6fc1649432cb7028e9282fe03409ec_arm64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:0faed089022b06e67e0013d6fd171d1495117f7081ab0432492a04ec0162e22b_ppc64le		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:13eb206e1b9444217978c0895cabd4a54c6c7976cad6aadc4d8191fbf95513f9_s390x		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:29b4ce69fe85e81609e6ca7913a54f198c71f59cb0dbcc2aa6802c4d237c28bd_amd64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:85668b4b3e5e91df4056702faf71a7981a6d9b1f77dac9b3c276288a2ddf0871_arm64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:5a6420e67fa2ccc567e7421072ba1a6a3820ad3e964cef9d4ab09dfd02f34e30_arm64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:bfcaee36b5c4b7a5e28f805a8063dcd9b7184cd633e042e4721a4313c36f2e82_ppc64le		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:d025df3add1287645833ef66bc9c992f08a9263cb9f48365ba82731fcefc5108_s390x		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:d1bd1dc3dc47bbed345db1cf76958104d23f3f1a23961f1f65e19c910aebeaf8_amd64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:1b37ddf287b032e4ffe62096b1bebd03d6e1b955a983e3cb59d22f2c3fa8c6c9_amd64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:3052464455752660000d20685dbb087544f2b60bbcf4c768e2e831c6f8777b1f_ppc64le		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:cf0fba7f83930c5b402de0af6335d950e5901219ab434c124eac73061a014354_arm64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:f5895ae776750ed7b835825abc2b2ae0091462233c48f91bace88da473f9b0b6_s390x		—

Threats

Impact Moderate

CVE-2026-42504

A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1050 - Excessive Platform Resource Consumption within a Loop

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:27c2265f15c17641f0ba8743270b87e21ef0b9c85d50b48284a4450e7a7c67e7_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:76dc19b8923e825e0a50e32c59228c1b42827e770fbbc561a8f08a2fcd4722fa_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:b8f7cb6561e0577c0b5e06bd0304e00d7ae953dab395faa8928f5f21902afefd_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:c59180d8ab63901671ef112914eb38ccde6fc1649432cb7028e9282fe03409ec_arm64	—	Vendor Fix fix Workaround

Known not affected 93 products

Product	Version	Remediation
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:71bb4ed581f561262b23378f567e6b6c783c4d06c6958e42b906ca483ca78c93_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:9ac39e9d927feeccad720d8df32e8ad846a71901f6a252f6fc2458a0ed17c968_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b809d399db0cc42ca196365b4378e980d79f76d5957b6ba5d5c5660a71e49eb6_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:eb2d75c47058bbfcde2954ac6da8c1972c5de064cb3d7cc2673ad416d932d6fe_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:128cdae616cbd3b5c2c968b22485d7be0f051a4d7a2607c119d503849270db5e_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6372300ace8311564286b4b827dfb15def13071e86383809463cd60275102139_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8efbf2da142d24a1d4613a77f1dfe71b0be2c8c49aedef4d30a00ca62b32aa2a_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b0170f5f2a06fbf06e6c9b8a3aa6c9cb688c1934c1c6f8c3205e2b726024d9d9_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:73b359fbdf2c41877502c8eb795aeae868a9093b4358ab3ee6aa90e15e7873b2_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:443fa9ebb6ac2ca2c840842d6679479fc5955464908e261d44177569eff9c8af_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:49be19a20112c2ca843ea67c984fd880ab18911ef3b8757ea05961fb7379b3c3_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:7c939c36153a034eb48b6d6269905bba69ba3991c50e2904f7e943ee5ad6ba57_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:86c1cd15321eaee9004490e5abbc4c3b766518d488e924981f61bcb70c135876_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:70453cda0ffc3424177410281d43b0671eeb5bfde6e4294e2ec28d71653f68b7_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:76486b5692ce55d8b00f61d28cf60e6917a8dc878d8cf6788f170184ffd21839_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:98db286472d5466d241779d0082b57315ff752827761b287993393fa89e369c1_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:a48bd2e1b73405629fe476f83dbb9c707099b42a9d1ef824941ced101a42ff50_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2cd4f2e7687f9631565357bd5b875f70ed856e4b335c201505e6dc57c679af6d_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:62d939562320165babf6b42bb07b1d69d71a5ada621f4beda36a7cdbf41ca452_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:a3e274a01780864f4fa58cc8e3340cc36168968c980b358d2d718d82818b7705_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:e0a36f410898d1ee979dffae62709839d5df6da9643b9cf6074ab3406078fc5c_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:58cf1dac74338e0db4751c90707f4b1c3d93cd6b2d2cb02695e17c4e84f5f5fa_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:65083d63d2413e2d9ff635f7e5a8062ea668fd4c8155d32c787d6f01b473be0a_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:77eed66a0b274ab229ae986813879d1c2f203cbb16623910160d359b05893ec3_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:90c42f2bdbcd27ea4fa0c4dbd55af121b67a0ea7540ebaad30a6ca20a6c3b498_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:20639404ef198fb65a9cad2ccdf07a0ef7383b031ec302472852ceca732f0689_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:acc3365766546d7ee81ca555c78cb2f46856d868efb0a3e7d60511ee5feb2f0f_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:b4350e929666ac7580d6672b4962062b836b82126566d40376da39da3a6c557c_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:bf37ef2edbda7e52c8a54773039bc2058429b61ec95ca6d21a9c39e706db6ca7_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:42b644586b27110dcdc4df205ca5944faf57fe07526acbd1b2f41b70c3e351a1_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:9a7d564ede6c8191fa7e92da021a93978d45f143d5ebfb77ae2eea8761c0af55_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:9af8fdccfbfb9f96191db3d3b6045eb1ffc9f2c320079d2841d0f28e728e0b35_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b2202c1817f1ddaac354bbd0f432e2086bcdfe46543d63e5339356696deb7de5_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:5351f576c10e79f668e11b8287c8333df95b26a36a77db74dd0a3f5376077c06_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:842d95108842a05c1310f514ebb3b6b93471a093c0f923f827638025c1879795_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:868aef34bf4b6afc9dd353ae5b66834707250b6d003f458da03ed12f1947eb9f_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:c7b1f910847ee333768cb947738e9eb34abfec1397ea346eafa289094d229f1c_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:349c911c5bc5fbb5ea0000b2c939eed2ba2e190f911d2549bc554295176b2b42_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:4875990d931e8aec312b8f983bfefe3a635e4b94fc0e124bf0aae09b62ac6b6f_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:79d4fc632872c0318156f5618d24c3786960fb7393abb25d9ec01208709610eb_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:c57650cde2f0d81539f67d31011468cf04af38c2f7e0b57e12988da4c455cb15_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:019c2e3c17a20166f3c207caca8c6b26a83c93e57141e4bf75553df6586d7a8a_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:58a3da4874df410cf9d5ad99db7ba87bd07144206388f408d9fbf1ebc95f9c03_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:5b89406f5817450acfe562d5006c1c00a8443ef8f4b9eee6326a7279420c3495_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:b9106f58d8ba6143393e1494e0f7d651d1360719e3c38b24005080981bfd27dc_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:4782aa11b8230e56729ec9bccfc4895a3343f7a42e24493b79b87eea09dd1da2_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:923ee684d8c97393b704e525c6ad4965df090c68ad1055d4a78323aea385ca18_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b0068fc5b41442eed9a545433553e2750c9bb150dd609568b8176e01603f7640_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:e974db96e70635d7a08bd1432903b0b6a9822702bda62015a8f96d2a59e2091c_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:0933ff0b400ed79c993a6175388eb5e251bcf50d401f64c7834d43733ad6ba93_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:96a023f63099eb8384a5cc77cd0abc7cb8e758c29d73d3ccb1a3e7e8dce32968_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:c049f1264a2b594ab78aee1edf308e01a55d3389bd333f304ba3470db4d1a898_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:f47e3ed2d1628242792cf4ccbf12d27c287a2598c73645a58e651c6880c55806_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6a6e33ae6d021bd2926eabe45a9128872036d981361c24b871002bc7a5305d12_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:926c07a18734c82bc5185cb8003aeeceeddfe55b793a430a48788c29be77c534_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:c48482927e28fcdc950a0d0e2761ffd992a37489cf3490e65250eb0828e205e0_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:cf73e3a3588ac1fef8363ae99b6b8cd7c05f8beac49f187210c506fd0c603867_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:14bddb6185b655aa31cf17ce23069c4ca921cdf2caea296b59cd7033e92d0590_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1c6c2ea48c21315a82362059ddf72e6d39f1b74e5f247ffbe5dfccbc489899d9_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:75f3cfee21c647347a00ed370bf48a37c5b91d86895bd357ea4f99c4571cab39_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:9361daf08d52df508e31c34d8989b1b588722ca557ba559913ce1a7b457c2953_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:4c4d34cb5d409591bde12c9d5610f746e3dad1d460d3fea9c613d0ae3f81d64f_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:602869c79b8b43e72a7e940c8bb088d91ecc1a448dd8c529baf3440ea9287559_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:90be25d82b8831bcd2baa1e5b2e37bf0c231e882885a1b568592dfb91bc58abf_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:db28988ba5225106449a05224d019cd25897385854230b7e39c7e3e4521093bd_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:06d3e779706d1187ecf1028b21883cb3d140a4357f8807dc8b8f011aad6f7f31_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:25d19e097b5ae0bc0d9e8f918bb5f1015ccdf77eb6d93350d3f0bcf1d7ee7937_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:3261677cb85bf9a87e4dc134396b71943e2e76821d0e35d7f8ddfa0cb4059140_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:e0f529589bf67cd7368bac7a2edb3c2e21423249c0514cff5e52e81c2b9fa11e_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:5b46489d5cea06c76497c5c8fcc535ad807b1c76734e493d0e066e23aec373ad_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:85f18ee14b931d2df20cd7b694467c53cf40864a057bc790b67b547fdd8beb39_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:b0281c14e6eb30e6ada9224f1c56c01bb101362adaecf46a9143245dd6c32b8c_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:ffd398dc9520463d713db4e2e1aefc6a6bb6c7b03694b69273f7296705ea51e2_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:54487b1509a0e951b74d30953a3732aa1adbf30e2c42fcacd3097667c277917d_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:59a71e223a49140412f052606c790bea160795ebb7b641a6de3001da7068e0b0_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:77d5053f790356decfbaa8fb249896858629fb2841a2afec64e527b4f4239439_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f2b285b37154654fb219227d42a5016327a13f99e0a5a0d9c04e29acb97f6fe9_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:2f479a222750e381a350390a7409bddf8b7be82b84702d49fc88a066b6d7f579_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:d934b23a365583a2278e953b9caac94415a187cab398a671376e710d3848d960_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:e6b757f955568b429df8c11e5ea5d7307b7a31b76d062f4461b67837eb9883f1_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:f1ada4311455e4ad9fa66b5f702abe188cf85d06907580d3fcaa6a0628b11fb2_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:0faed089022b06e67e0013d6fd171d1495117f7081ab0432492a04ec0162e22b_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:13eb206e1b9444217978c0895cabd4a54c6c7976cad6aadc4d8191fbf95513f9_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:29b4ce69fe85e81609e6ca7913a54f198c71f59cb0dbcc2aa6802c4d237c28bd_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:85668b4b3e5e91df4056702faf71a7981a6d9b1f77dac9b3c276288a2ddf0871_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:5a6420e67fa2ccc567e7421072ba1a6a3820ad3e964cef9d4ab09dfd02f34e30_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:bfcaee36b5c4b7a5e28f805a8063dcd9b7184cd633e042e4721a4313c36f2e82_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:d025df3add1287645833ef66bc9c992f08a9263cb9f48365ba82731fcefc5108_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:d1bd1dc3dc47bbed345db1cf76958104d23f3f1a23961f1f65e19c910aebeaf8_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:1b37ddf287b032e4ffe62096b1bebd03d6e1b955a983e3cb59d22f2c3fa8c6c9_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:3052464455752660000d20685dbb087544f2b60bbcf4c768e2e831c6f8777b1f_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:cf0fba7f83930c5b402de0af6335d950e5901219ab434c124eac73061a014354_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:f5895ae776750ed7b835825abc2b2ae0091462233c48f91bace88da473f9b0b6_s390x	—	Workaround

Threats

Impact Important

CVE-2026-56853

A flaw was found in the `net/http` component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the `ReadHeaderTimeout` is not correctly applied during this process. This oversight could allow a remote attacker to maintain open connections indefinitely, potentially leading to a Denial of Service (DoS) by exhausting server resources.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 4 products, the same list as for CVE-2026-33818

Known not affected 93 products, the same list as for CVE-2026-33818

Threats

Impact Important

CVE-2026-56858

A flaw was found in the `html/template` component of Go (golang). Pathological inputs could prematurely close an unescaped forward slash ('/'), allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting (XSS), where malicious scripts are executed in a user's browser, potentially compromising user data or actions.

8.1 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

CWE-79 - Improper Neutralization of Input During Web Page Generation

Affected products

Fixed 4 products, the same list as for CVE-2026-33818

Known not affected 93 products, the same list as for CVE-2026-33818

Threats

Impact Important

CVE-2026-56859

A flaw was found in the `encoding/xml` package of Go. The `DecodeElement` function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service (DoS) for the affected application.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-776 - Improper Restriction of Recursive Entity References in DTDs

Affected products

Fixed 4 products, the same list as for CVE-2026-33818

Known not affected 93 products, the same list as for CVE-2026-33818

Threats

Impact Important

CVE-2026-56860

A flaw was found in `net/url`, a component of `golang`. This vulnerability arises when resolving relative paths that contain numerous parent directory ('..') segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory allocation. This can result in a Denial of Service (DoS) due to resource exhaustion.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 4 products, the same list as for CVE-2026-33818

Known not affected 93 products, the same list as for CVE-2026-33818

Threats

Impact Important

CVE-2026-56862

A flaw was found in the `crypto/tls` package, part of `golang`. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service (DoS) condition.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1050 - Excessive Platform Resource Consumption within a Loop

Affected products

Fixed 4 products, the same list as for CVE-2026-33818

Known not affected 93 products, the same list as for CVE-2026-33818

Threats

Impact Important

CVE-2026-63209

A flaw was found in the klauspost/compress package. A remote attacker can exploit this vulnerability by supplying a specially crafted compression dictionary with an excessively large repeat value, triggering an integer overflow. When the dictionary is subsequently processed, this overflow leads to out-of-bounds memory access, crashing the application and resulting in a Denial of Service (DoS).

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-823 - Use of Out-of-range Pointer Offset

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:0faed089022b06e67e0013d6fd171d1495117f7081ab0432492a04ec0162e22b_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:13eb206e1b9444217978c0895cabd4a54c6c7976cad6aadc4d8191fbf95513f9_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:29b4ce69fe85e81609e6ca7913a54f198c71f59cb0dbcc2aa6802c4d237c28bd_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:85668b4b3e5e91df4056702faf71a7981a6d9b1f77dac9b3c276288a2ddf0871_arm64	—	Vendor Fix fix Workaround

Known not affected 93 products

Product	Version	Remediation
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:71bb4ed581f561262b23378f567e6b6c783c4d06c6958e42b906ca483ca78c93_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:9ac39e9d927feeccad720d8df32e8ad846a71901f6a252f6fc2458a0ed17c968_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b809d399db0cc42ca196365b4378e980d79f76d5957b6ba5d5c5660a71e49eb6_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:eb2d75c47058bbfcde2954ac6da8c1972c5de064cb3d7cc2673ad416d932d6fe_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:128cdae616cbd3b5c2c968b22485d7be0f051a4d7a2607c119d503849270db5e_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6372300ace8311564286b4b827dfb15def13071e86383809463cd60275102139_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8efbf2da142d24a1d4613a77f1dfe71b0be2c8c49aedef4d30a00ca62b32aa2a_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b0170f5f2a06fbf06e6c9b8a3aa6c9cb688c1934c1c6f8c3205e2b726024d9d9_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:73b359fbdf2c41877502c8eb795aeae868a9093b4358ab3ee6aa90e15e7873b2_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:443fa9ebb6ac2ca2c840842d6679479fc5955464908e261d44177569eff9c8af_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:49be19a20112c2ca843ea67c984fd880ab18911ef3b8757ea05961fb7379b3c3_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:7c939c36153a034eb48b6d6269905bba69ba3991c50e2904f7e943ee5ad6ba57_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:86c1cd15321eaee9004490e5abbc4c3b766518d488e924981f61bcb70c135876_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:70453cda0ffc3424177410281d43b0671eeb5bfde6e4294e2ec28d71653f68b7_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:76486b5692ce55d8b00f61d28cf60e6917a8dc878d8cf6788f170184ffd21839_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:98db286472d5466d241779d0082b57315ff752827761b287993393fa89e369c1_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:a48bd2e1b73405629fe476f83dbb9c707099b42a9d1ef824941ced101a42ff50_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2cd4f2e7687f9631565357bd5b875f70ed856e4b335c201505e6dc57c679af6d_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:62d939562320165babf6b42bb07b1d69d71a5ada621f4beda36a7cdbf41ca452_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:a3e274a01780864f4fa58cc8e3340cc36168968c980b358d2d718d82818b7705_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:e0a36f410898d1ee979dffae62709839d5df6da9643b9cf6074ab3406078fc5c_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:58cf1dac74338e0db4751c90707f4b1c3d93cd6b2d2cb02695e17c4e84f5f5fa_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:65083d63d2413e2d9ff635f7e5a8062ea668fd4c8155d32c787d6f01b473be0a_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:77eed66a0b274ab229ae986813879d1c2f203cbb16623910160d359b05893ec3_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:90c42f2bdbcd27ea4fa0c4dbd55af121b67a0ea7540ebaad30a6ca20a6c3b498_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:20639404ef198fb65a9cad2ccdf07a0ef7383b031ec302472852ceca732f0689_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:acc3365766546d7ee81ca555c78cb2f46856d868efb0a3e7d60511ee5feb2f0f_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:b4350e929666ac7580d6672b4962062b836b82126566d40376da39da3a6c557c_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:bf37ef2edbda7e52c8a54773039bc2058429b61ec95ca6d21a9c39e706db6ca7_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:42b644586b27110dcdc4df205ca5944faf57fe07526acbd1b2f41b70c3e351a1_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:9a7d564ede6c8191fa7e92da021a93978d45f143d5ebfb77ae2eea8761c0af55_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:9af8fdccfbfb9f96191db3d3b6045eb1ffc9f2c320079d2841d0f28e728e0b35_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b2202c1817f1ddaac354bbd0f432e2086bcdfe46543d63e5339356696deb7de5_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:5351f576c10e79f668e11b8287c8333df95b26a36a77db74dd0a3f5376077c06_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:842d95108842a05c1310f514ebb3b6b93471a093c0f923f827638025c1879795_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:868aef34bf4b6afc9dd353ae5b66834707250b6d003f458da03ed12f1947eb9f_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:c7b1f910847ee333768cb947738e9eb34abfec1397ea346eafa289094d229f1c_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:349c911c5bc5fbb5ea0000b2c939eed2ba2e190f911d2549bc554295176b2b42_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:4875990d931e8aec312b8f983bfefe3a635e4b94fc0e124bf0aae09b62ac6b6f_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:79d4fc632872c0318156f5618d24c3786960fb7393abb25d9ec01208709610eb_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:c57650cde2f0d81539f67d31011468cf04af38c2f7e0b57e12988da4c455cb15_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:019c2e3c17a20166f3c207caca8c6b26a83c93e57141e4bf75553df6586d7a8a_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:58a3da4874df410cf9d5ad99db7ba87bd07144206388f408d9fbf1ebc95f9c03_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:5b89406f5817450acfe562d5006c1c00a8443ef8f4b9eee6326a7279420c3495_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:b9106f58d8ba6143393e1494e0f7d651d1360719e3c38b24005080981bfd27dc_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:4782aa11b8230e56729ec9bccfc4895a3343f7a42e24493b79b87eea09dd1da2_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:923ee684d8c97393b704e525c6ad4965df090c68ad1055d4a78323aea385ca18_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b0068fc5b41442eed9a545433553e2750c9bb150dd609568b8176e01603f7640_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:e974db96e70635d7a08bd1432903b0b6a9822702bda62015a8f96d2a59e2091c_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:0933ff0b400ed79c993a6175388eb5e251bcf50d401f64c7834d43733ad6ba93_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:96a023f63099eb8384a5cc77cd0abc7cb8e758c29d73d3ccb1a3e7e8dce32968_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:c049f1264a2b594ab78aee1edf308e01a55d3389bd333f304ba3470db4d1a898_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:f47e3ed2d1628242792cf4ccbf12d27c287a2598c73645a58e651c6880c55806_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6a6e33ae6d021bd2926eabe45a9128872036d981361c24b871002bc7a5305d12_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:926c07a18734c82bc5185cb8003aeeceeddfe55b793a430a48788c29be77c534_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:c48482927e28fcdc950a0d0e2761ffd992a37489cf3490e65250eb0828e205e0_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:cf73e3a3588ac1fef8363ae99b6b8cd7c05f8beac49f187210c506fd0c603867_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:14bddb6185b655aa31cf17ce23069c4ca921cdf2caea296b59cd7033e92d0590_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1c6c2ea48c21315a82362059ddf72e6d39f1b74e5f247ffbe5dfccbc489899d9_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:75f3cfee21c647347a00ed370bf48a37c5b91d86895bd357ea4f99c4571cab39_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:9361daf08d52df508e31c34d8989b1b588722ca557ba559913ce1a7b457c2953_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:4c4d34cb5d409591bde12c9d5610f746e3dad1d460d3fea9c613d0ae3f81d64f_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:602869c79b8b43e72a7e940c8bb088d91ecc1a448dd8c529baf3440ea9287559_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:90be25d82b8831bcd2baa1e5b2e37bf0c231e882885a1b568592dfb91bc58abf_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:db28988ba5225106449a05224d019cd25897385854230b7e39c7e3e4521093bd_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:06d3e779706d1187ecf1028b21883cb3d140a4357f8807dc8b8f011aad6f7f31_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:25d19e097b5ae0bc0d9e8f918bb5f1015ccdf77eb6d93350d3f0bcf1d7ee7937_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:3261677cb85bf9a87e4dc134396b71943e2e76821d0e35d7f8ddfa0cb4059140_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:e0f529589bf67cd7368bac7a2edb3c2e21423249c0514cff5e52e81c2b9fa11e_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:5b46489d5cea06c76497c5c8fcc535ad807b1c76734e493d0e066e23aec373ad_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:85f18ee14b931d2df20cd7b694467c53cf40864a057bc790b67b547fdd8beb39_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:b0281c14e6eb30e6ada9224f1c56c01bb101362adaecf46a9143245dd6c32b8c_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:ffd398dc9520463d713db4e2e1aefc6a6bb6c7b03694b69273f7296705ea51e2_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:54487b1509a0e951b74d30953a3732aa1adbf30e2c42fcacd3097667c277917d_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:59a71e223a49140412f052606c790bea160795ebb7b641a6de3001da7068e0b0_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:77d5053f790356decfbaa8fb249896858629fb2841a2afec64e527b4f4239439_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f2b285b37154654fb219227d42a5016327a13f99e0a5a0d9c04e29acb97f6fe9_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:2f479a222750e381a350390a7409bddf8b7be82b84702d49fc88a066b6d7f579_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:d934b23a365583a2278e953b9caac94415a187cab398a671376e710d3848d960_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:e6b757f955568b429df8c11e5ea5d7307b7a31b76d062f4461b67837eb9883f1_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:f1ada4311455e4ad9fa66b5f702abe188cf85d06907580d3fcaa6a0628b11fb2_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:27c2265f15c17641f0ba8743270b87e21ef0b9c85d50b48284a4450e7a7c67e7_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:76dc19b8923e825e0a50e32c59228c1b42827e770fbbc561a8f08a2fcd4722fa_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:b8f7cb6561e0577c0b5e06bd0304e00d7ae953dab395faa8928f5f21902afefd_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:c59180d8ab63901671ef112914eb38ccde6fc1649432cb7028e9282fe03409ec_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:5a6420e67fa2ccc567e7421072ba1a6a3820ad3e964cef9d4ab09dfd02f34e30_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:bfcaee36b5c4b7a5e28f805a8063dcd9b7184cd633e042e4721a4313c36f2e82_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:d025df3add1287645833ef66bc9c992f08a9263cb9f48365ba82731fcefc5108_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:d1bd1dc3dc47bbed345db1cf76958104d23f3f1a23961f1f65e19c910aebeaf8_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:1b37ddf287b032e4ffe62096b1bebd03d6e1b955a983e3cb59d22f2c3fa8c6c9_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:3052464455752660000d20685dbb087544f2b60bbcf4c768e2e831c6f8777b1f_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:cf0fba7f83930c5b402de0af6335d950e5901219ab434c124eac73061a014354_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:f5895ae776750ed7b835825abc2b2ae0091462233c48f91bace88da473f9b0b6_s390x	—	Workaround

Threats

Impact Important

CVE-2026-75838

A flaw was found in DOMPurify. This cross-site scripting vulnerability occurs during IN_PLACE sanitization, where element-removal hooks fail to neutralize detached subtrees. A remote attacker can exploit this by supplying specially crafted HTML with event handlers. This allows the execution of malicious scripts even after the HTML appears to be sanitized, leading to potential information disclosure or unauthorized actions.

6.1 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWE-79 - Improper Neutralization of Input During Web Page Generation

Affected products

Fixed 4 products

Product	Version	Remediation
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2cd4f2e7687f9631565357bd5b875f70ed856e4b335c201505e6dc57c679af6d_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:62d939562320165babf6b42bb07b1d69d71a5ada621f4beda36a7cdbf41ca452_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:a3e274a01780864f4fa58cc8e3340cc36168968c980b358d2d718d82818b7705_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:e0a36f410898d1ee979dffae62709839d5df6da9643b9cf6074ab3406078fc5c_amd64	—	Vendor Fix fix Workaround

Known not affected 93 products

Product	Version	Remediation
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:71bb4ed581f561262b23378f567e6b6c783c4d06c6958e42b906ca483ca78c93_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:9ac39e9d927feeccad720d8df32e8ad846a71901f6a252f6fc2458a0ed17c968_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b809d399db0cc42ca196365b4378e980d79f76d5957b6ba5d5c5660a71e49eb6_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:eb2d75c47058bbfcde2954ac6da8c1972c5de064cb3d7cc2673ad416d932d6fe_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:128cdae616cbd3b5c2c968b22485d7be0f051a4d7a2607c119d503849270db5e_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6372300ace8311564286b4b827dfb15def13071e86383809463cd60275102139_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8efbf2da142d24a1d4613a77f1dfe71b0be2c8c49aedef4d30a00ca62b32aa2a_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b0170f5f2a06fbf06e6c9b8a3aa6c9cb688c1934c1c6f8c3205e2b726024d9d9_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:73b359fbdf2c41877502c8eb795aeae868a9093b4358ab3ee6aa90e15e7873b2_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:443fa9ebb6ac2ca2c840842d6679479fc5955464908e261d44177569eff9c8af_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:49be19a20112c2ca843ea67c984fd880ab18911ef3b8757ea05961fb7379b3c3_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:7c939c36153a034eb48b6d6269905bba69ba3991c50e2904f7e943ee5ad6ba57_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:86c1cd15321eaee9004490e5abbc4c3b766518d488e924981f61bcb70c135876_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:70453cda0ffc3424177410281d43b0671eeb5bfde6e4294e2ec28d71653f68b7_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:76486b5692ce55d8b00f61d28cf60e6917a8dc878d8cf6788f170184ffd21839_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:98db286472d5466d241779d0082b57315ff752827761b287993393fa89e369c1_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:a48bd2e1b73405629fe476f83dbb9c707099b42a9d1ef824941ced101a42ff50_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:58cf1dac74338e0db4751c90707f4b1c3d93cd6b2d2cb02695e17c4e84f5f5fa_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:65083d63d2413e2d9ff635f7e5a8062ea668fd4c8155d32c787d6f01b473be0a_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:77eed66a0b274ab229ae986813879d1c2f203cbb16623910160d359b05893ec3_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:90c42f2bdbcd27ea4fa0c4dbd55af121b67a0ea7540ebaad30a6ca20a6c3b498_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:20639404ef198fb65a9cad2ccdf07a0ef7383b031ec302472852ceca732f0689_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:acc3365766546d7ee81ca555c78cb2f46856d868efb0a3e7d60511ee5feb2f0f_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:b4350e929666ac7580d6672b4962062b836b82126566d40376da39da3a6c557c_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:bf37ef2edbda7e52c8a54773039bc2058429b61ec95ca6d21a9c39e706db6ca7_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:42b644586b27110dcdc4df205ca5944faf57fe07526acbd1b2f41b70c3e351a1_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:9a7d564ede6c8191fa7e92da021a93978d45f143d5ebfb77ae2eea8761c0af55_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:9af8fdccfbfb9f96191db3d3b6045eb1ffc9f2c320079d2841d0f28e728e0b35_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b2202c1817f1ddaac354bbd0f432e2086bcdfe46543d63e5339356696deb7de5_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:5351f576c10e79f668e11b8287c8333df95b26a36a77db74dd0a3f5376077c06_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:842d95108842a05c1310f514ebb3b6b93471a093c0f923f827638025c1879795_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:868aef34bf4b6afc9dd353ae5b66834707250b6d003f458da03ed12f1947eb9f_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:c7b1f910847ee333768cb947738e9eb34abfec1397ea346eafa289094d229f1c_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:349c911c5bc5fbb5ea0000b2c939eed2ba2e190f911d2549bc554295176b2b42_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:4875990d931e8aec312b8f983bfefe3a635e4b94fc0e124bf0aae09b62ac6b6f_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:79d4fc632872c0318156f5618d24c3786960fb7393abb25d9ec01208709610eb_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:c57650cde2f0d81539f67d31011468cf04af38c2f7e0b57e12988da4c455cb15_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:019c2e3c17a20166f3c207caca8c6b26a83c93e57141e4bf75553df6586d7a8a_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:58a3da4874df410cf9d5ad99db7ba87bd07144206388f408d9fbf1ebc95f9c03_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:5b89406f5817450acfe562d5006c1c00a8443ef8f4b9eee6326a7279420c3495_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:b9106f58d8ba6143393e1494e0f7d651d1360719e3c38b24005080981bfd27dc_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:4782aa11b8230e56729ec9bccfc4895a3343f7a42e24493b79b87eea09dd1da2_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:923ee684d8c97393b704e525c6ad4965df090c68ad1055d4a78323aea385ca18_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b0068fc5b41442eed9a545433553e2750c9bb150dd609568b8176e01603f7640_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:e974db96e70635d7a08bd1432903b0b6a9822702bda62015a8f96d2a59e2091c_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:0933ff0b400ed79c993a6175388eb5e251bcf50d401f64c7834d43733ad6ba93_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:96a023f63099eb8384a5cc77cd0abc7cb8e758c29d73d3ccb1a3e7e8dce32968_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:c049f1264a2b594ab78aee1edf308e01a55d3389bd333f304ba3470db4d1a898_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:f47e3ed2d1628242792cf4ccbf12d27c287a2598c73645a58e651c6880c55806_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6a6e33ae6d021bd2926eabe45a9128872036d981361c24b871002bc7a5305d12_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:926c07a18734c82bc5185cb8003aeeceeddfe55b793a430a48788c29be77c534_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:c48482927e28fcdc950a0d0e2761ffd992a37489cf3490e65250eb0828e205e0_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:cf73e3a3588ac1fef8363ae99b6b8cd7c05f8beac49f187210c506fd0c603867_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:14bddb6185b655aa31cf17ce23069c4ca921cdf2caea296b59cd7033e92d0590_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1c6c2ea48c21315a82362059ddf72e6d39f1b74e5f247ffbe5dfccbc489899d9_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:75f3cfee21c647347a00ed370bf48a37c5b91d86895bd357ea4f99c4571cab39_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:9361daf08d52df508e31c34d8989b1b588722ca557ba559913ce1a7b457c2953_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:4c4d34cb5d409591bde12c9d5610f746e3dad1d460d3fea9c613d0ae3f81d64f_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:602869c79b8b43e72a7e940c8bb088d91ecc1a448dd8c529baf3440ea9287559_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:90be25d82b8831bcd2baa1e5b2e37bf0c231e882885a1b568592dfb91bc58abf_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:db28988ba5225106449a05224d019cd25897385854230b7e39c7e3e4521093bd_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:06d3e779706d1187ecf1028b21883cb3d140a4357f8807dc8b8f011aad6f7f31_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:25d19e097b5ae0bc0d9e8f918bb5f1015ccdf77eb6d93350d3f0bcf1d7ee7937_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:3261677cb85bf9a87e4dc134396b71943e2e76821d0e35d7f8ddfa0cb4059140_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:e0f529589bf67cd7368bac7a2edb3c2e21423249c0514cff5e52e81c2b9fa11e_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:5b46489d5cea06c76497c5c8fcc535ad807b1c76734e493d0e066e23aec373ad_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:85f18ee14b931d2df20cd7b694467c53cf40864a057bc790b67b547fdd8beb39_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:b0281c14e6eb30e6ada9224f1c56c01bb101362adaecf46a9143245dd6c32b8c_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:ffd398dc9520463d713db4e2e1aefc6a6bb6c7b03694b69273f7296705ea51e2_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:54487b1509a0e951b74d30953a3732aa1adbf30e2c42fcacd3097667c277917d_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:59a71e223a49140412f052606c790bea160795ebb7b641a6de3001da7068e0b0_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:77d5053f790356decfbaa8fb249896858629fb2841a2afec64e527b4f4239439_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f2b285b37154654fb219227d42a5016327a13f99e0a5a0d9c04e29acb97f6fe9_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:2f479a222750e381a350390a7409bddf8b7be82b84702d49fc88a066b6d7f579_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:d934b23a365583a2278e953b9caac94415a187cab398a671376e710d3848d960_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:e6b757f955568b429df8c11e5ea5d7307b7a31b76d062f4461b67837eb9883f1_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:f1ada4311455e4ad9fa66b5f702abe188cf85d06907580d3fcaa6a0628b11fb2_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:27c2265f15c17641f0ba8743270b87e21ef0b9c85d50b48284a4450e7a7c67e7_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:76dc19b8923e825e0a50e32c59228c1b42827e770fbbc561a8f08a2fcd4722fa_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:b8f7cb6561e0577c0b5e06bd0304e00d7ae953dab395faa8928f5f21902afefd_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:c59180d8ab63901671ef112914eb38ccde6fc1649432cb7028e9282fe03409ec_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:0faed089022b06e67e0013d6fd171d1495117f7081ab0432492a04ec0162e22b_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:13eb206e1b9444217978c0895cabd4a54c6c7976cad6aadc4d8191fbf95513f9_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:29b4ce69fe85e81609e6ca7913a54f198c71f59cb0dbcc2aa6802c4d237c28bd_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:85668b4b3e5e91df4056702faf71a7981a6d9b1f77dac9b3c276288a2ddf0871_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:5a6420e67fa2ccc567e7421072ba1a6a3820ad3e964cef9d4ab09dfd02f34e30_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:bfcaee36b5c4b7a5e28f805a8063dcd9b7184cd633e042e4721a4313c36f2e82_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:d025df3add1287645833ef66bc9c992f08a9263cb9f48365ba82731fcefc5108_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:d1bd1dc3dc47bbed345db1cf76958104d23f3f1a23961f1f65e19c910aebeaf8_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:1b37ddf287b032e4ffe62096b1bebd03d6e1b955a983e3cb59d22f2c3fa8c6c9_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:3052464455752660000d20685dbb087544f2b60bbcf4c768e2e831c6f8777b1f_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:cf0fba7f83930c5b402de0af6335d950e5901219ab434c124eac73061a014354_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:f5895ae776750ed7b835825abc2b2ae0091462233c48f91bace88da473f9b0b6_s390x	—	Workaround

Threats

Impact Moderate

CVE-2026-75899

A flaw was found in fast-uri, a URI parser for Node.js. The component incorrectly decodes percent escapes in a hostname twice during URI parsing and authority recomposition. This double decoding can allow a remote attacker to manipulate a URI to point to a different network destination, such as a loopback address. This vulnerability can lead to Server-Side Request Forgery (SSRF) and bypass host-based security policies.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-140 - Improper Neutralization of Delimiters

Affected products

Fixed 16 products, the same list as for CVE-2026-19534

Known not affected 81 products, the same list as for CVE-2026-19534

Threats

Impact Important

CVE-2026-75931

A flaw was found in fast-uri, a URI parser for Node.js. This vulnerability arises because the parser fails to consistently convert internationalized domain names (IDN) to their standard ASCII form when processing scheme-relative references. This inconsistency can lead to host confusion, where an application might validate a URI against a security policy using one hostname, but then resolve to a different, potentially malicious, hostname. This discrepancy could allow an attacker to bypass security policies and access unauthorized resources.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-444 - Inconsistent Interpretation of HTTP Requests

Affected products

Fixed 16 products, the same list as for CVE-2026-19534

Known not affected 81 products, the same list as for CVE-2026-19534

Threats

Impact Important

CVE-2026-75975

A flaw was found in fast-uri, a URI parser for Node.js. Its custom parser for bracketed IPv6 literals does not fully validate the IPv6 grammar, allowing invalid trailing text in an authority to be silently discarded. This can lead to a malformed, attacker-controlled host being normalized into a different, valid IPv6 destination, such as a local or private IPv6 target. An application normalizing untrusted URLs before outbound requests, redirects, or proxy routing could be redirected, resulting in a server-side request forgery (SSRF) and address-policy bypass.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-918 - Server-Side Request Forgery

Affected products

Fixed 16 products, the same list as for CVE-2026-19534

Known not affected 81 products, the same list as for CVE-2026-19534

Threats

Impact Important

CVE-2026-76172

A flaw was found in fast-uri, a software component used for parsing Uniform Resource Identifiers (URIs) in Node.js applications. This vulnerability arises from an issue in how fast-uri processes the scheme part of a URI, specifically when it contains special characters that are percent-encoded. An attacker can exploit this by crafting a malicious URI, causing the parser to misinterpret the host, which can lead to serious security risks. These risks include unauthorized redirection to external websites, server-side request forgery (SSRF) where the application makes unintended requests to internal or external resources, and bypassing security policies.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-76 - Improper Neutralization of Equivalent Special Elements

Affected products

Fixed 16 products, the same list as for CVE-2026-19534

Known not affected 81 products, the same list as for CVE-2026-19534

Threats

Impact Important

CVE-2026-77301

A flaw was found in adm-zip, a JavaScript library for handling ZIP archives. The `getData()` function in `zipEntry.js` allocates memory based on the declared uncompressed size in a ZIP entry's central directory without validating this value against the actual compressed data. A remote attacker can exploit this by providing a specially crafted, small ZIP file that declares a multi-gigabyte uncompressed size. This can lead to excessive memory consumption, causing applications to terminate or suffer service-wide memory exhaustion, resulting in a Denial of Service (DoS).

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 28 products

Product	Version	Remediation
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2cd4f2e7687f9631565357bd5b875f70ed856e4b335c201505e6dc57c679af6d_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:62d939562320165babf6b42bb07b1d69d71a5ada621f4beda36a7cdbf41ca452_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:a3e274a01780864f4fa58cc8e3340cc36168968c980b358d2d718d82818b7705_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:e0a36f410898d1ee979dffae62709839d5df6da9643b9cf6074ab3406078fc5c_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:58cf1dac74338e0db4751c90707f4b1c3d93cd6b2d2cb02695e17c4e84f5f5fa_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:65083d63d2413e2d9ff635f7e5a8062ea668fd4c8155d32c787d6f01b473be0a_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:77eed66a0b274ab229ae986813879d1c2f203cbb16623910160d359b05893ec3_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:90c42f2bdbcd27ea4fa0c4dbd55af121b67a0ea7540ebaad30a6ca20a6c3b498_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:20639404ef198fb65a9cad2ccdf07a0ef7383b031ec302472852ceca732f0689_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:acc3365766546d7ee81ca555c78cb2f46856d868efb0a3e7d60511ee5feb2f0f_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:b4350e929666ac7580d6672b4962062b836b82126566d40376da39da3a6c557c_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:bf37ef2edbda7e52c8a54773039bc2058429b61ec95ca6d21a9c39e706db6ca7_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:42b644586b27110dcdc4df205ca5944faf57fe07526acbd1b2f41b70c3e351a1_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:9a7d564ede6c8191fa7e92da021a93978d45f143d5ebfb77ae2eea8761c0af55_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:9af8fdccfbfb9f96191db3d3b6045eb1ffc9f2c320079d2841d0f28e728e0b35_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b2202c1817f1ddaac354bbd0f432e2086bcdfe46543d63e5339356696deb7de5_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:0933ff0b400ed79c993a6175388eb5e251bcf50d401f64c7834d43733ad6ba93_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:96a023f63099eb8384a5cc77cd0abc7cb8e758c29d73d3ccb1a3e7e8dce32968_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:c049f1264a2b594ab78aee1edf308e01a55d3389bd333f304ba3470db4d1a898_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:f47e3ed2d1628242792cf4ccbf12d27c287a2598c73645a58e651c6880c55806_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6a6e33ae6d021bd2926eabe45a9128872036d981361c24b871002bc7a5305d12_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:926c07a18734c82bc5185cb8003aeeceeddfe55b793a430a48788c29be77c534_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:c48482927e28fcdc950a0d0e2761ffd992a37489cf3490e65250eb0828e205e0_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:cf73e3a3588ac1fef8363ae99b6b8cd7c05f8beac49f187210c506fd0c603867_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:14bddb6185b655aa31cf17ce23069c4ca921cdf2caea296b59cd7033e92d0590_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1c6c2ea48c21315a82362059ddf72e6d39f1b74e5f247ffbe5dfccbc489899d9_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:75f3cfee21c647347a00ed370bf48a37c5b91d86895bd357ea4f99c4571cab39_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:9361daf08d52df508e31c34d8989b1b588722ca557ba559913ce1a7b457c2953_arm64	—	Vendor Fix fix Workaround

Known not affected 69 products

Product	Version	Remediation
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:71bb4ed581f561262b23378f567e6b6c783c4d06c6958e42b906ca483ca78c93_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:9ac39e9d927feeccad720d8df32e8ad846a71901f6a252f6fc2458a0ed17c968_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b809d399db0cc42ca196365b4378e980d79f76d5957b6ba5d5c5660a71e49eb6_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:eb2d75c47058bbfcde2954ac6da8c1972c5de064cb3d7cc2673ad416d932d6fe_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:128cdae616cbd3b5c2c968b22485d7be0f051a4d7a2607c119d503849270db5e_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6372300ace8311564286b4b827dfb15def13071e86383809463cd60275102139_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8efbf2da142d24a1d4613a77f1dfe71b0be2c8c49aedef4d30a00ca62b32aa2a_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b0170f5f2a06fbf06e6c9b8a3aa6c9cb688c1934c1c6f8c3205e2b726024d9d9_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:73b359fbdf2c41877502c8eb795aeae868a9093b4358ab3ee6aa90e15e7873b2_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:443fa9ebb6ac2ca2c840842d6679479fc5955464908e261d44177569eff9c8af_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:49be19a20112c2ca843ea67c984fd880ab18911ef3b8757ea05961fb7379b3c3_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:7c939c36153a034eb48b6d6269905bba69ba3991c50e2904f7e943ee5ad6ba57_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:86c1cd15321eaee9004490e5abbc4c3b766518d488e924981f61bcb70c135876_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:70453cda0ffc3424177410281d43b0671eeb5bfde6e4294e2ec28d71653f68b7_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:76486b5692ce55d8b00f61d28cf60e6917a8dc878d8cf6788f170184ffd21839_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:98db286472d5466d241779d0082b57315ff752827761b287993393fa89e369c1_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:a48bd2e1b73405629fe476f83dbb9c707099b42a9d1ef824941ced101a42ff50_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:5351f576c10e79f668e11b8287c8333df95b26a36a77db74dd0a3f5376077c06_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:842d95108842a05c1310f514ebb3b6b93471a093c0f923f827638025c1879795_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:868aef34bf4b6afc9dd353ae5b66834707250b6d003f458da03ed12f1947eb9f_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:c7b1f910847ee333768cb947738e9eb34abfec1397ea346eafa289094d229f1c_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:349c911c5bc5fbb5ea0000b2c939eed2ba2e190f911d2549bc554295176b2b42_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:4875990d931e8aec312b8f983bfefe3a635e4b94fc0e124bf0aae09b62ac6b6f_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:79d4fc632872c0318156f5618d24c3786960fb7393abb25d9ec01208709610eb_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:c57650cde2f0d81539f67d31011468cf04af38c2f7e0b57e12988da4c455cb15_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:019c2e3c17a20166f3c207caca8c6b26a83c93e57141e4bf75553df6586d7a8a_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:58a3da4874df410cf9d5ad99db7ba87bd07144206388f408d9fbf1ebc95f9c03_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:5b89406f5817450acfe562d5006c1c00a8443ef8f4b9eee6326a7279420c3495_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:b9106f58d8ba6143393e1494e0f7d651d1360719e3c38b24005080981bfd27dc_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:4782aa11b8230e56729ec9bccfc4895a3343f7a42e24493b79b87eea09dd1da2_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:923ee684d8c97393b704e525c6ad4965df090c68ad1055d4a78323aea385ca18_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b0068fc5b41442eed9a545433553e2750c9bb150dd609568b8176e01603f7640_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:e974db96e70635d7a08bd1432903b0b6a9822702bda62015a8f96d2a59e2091c_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:4c4d34cb5d409591bde12c9d5610f746e3dad1d460d3fea9c613d0ae3f81d64f_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:602869c79b8b43e72a7e940c8bb088d91ecc1a448dd8c529baf3440ea9287559_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:90be25d82b8831bcd2baa1e5b2e37bf0c231e882885a1b568592dfb91bc58abf_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:db28988ba5225106449a05224d019cd25897385854230b7e39c7e3e4521093bd_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:06d3e779706d1187ecf1028b21883cb3d140a4357f8807dc8b8f011aad6f7f31_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:25d19e097b5ae0bc0d9e8f918bb5f1015ccdf77eb6d93350d3f0bcf1d7ee7937_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:3261677cb85bf9a87e4dc134396b71943e2e76821d0e35d7f8ddfa0cb4059140_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:e0f529589bf67cd7368bac7a2edb3c2e21423249c0514cff5e52e81c2b9fa11e_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:5b46489d5cea06c76497c5c8fcc535ad807b1c76734e493d0e066e23aec373ad_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:85f18ee14b931d2df20cd7b694467c53cf40864a057bc790b67b547fdd8beb39_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:b0281c14e6eb30e6ada9224f1c56c01bb101362adaecf46a9143245dd6c32b8c_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:ffd398dc9520463d713db4e2e1aefc6a6bb6c7b03694b69273f7296705ea51e2_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:54487b1509a0e951b74d30953a3732aa1adbf30e2c42fcacd3097667c277917d_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:59a71e223a49140412f052606c790bea160795ebb7b641a6de3001da7068e0b0_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:77d5053f790356decfbaa8fb249896858629fb2841a2afec64e527b4f4239439_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f2b285b37154654fb219227d42a5016327a13f99e0a5a0d9c04e29acb97f6fe9_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:2f479a222750e381a350390a7409bddf8b7be82b84702d49fc88a066b6d7f579_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:d934b23a365583a2278e953b9caac94415a187cab398a671376e710d3848d960_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:e6b757f955568b429df8c11e5ea5d7307b7a31b76d062f4461b67837eb9883f1_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:f1ada4311455e4ad9fa66b5f702abe188cf85d06907580d3fcaa6a0628b11fb2_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:27c2265f15c17641f0ba8743270b87e21ef0b9c85d50b48284a4450e7a7c67e7_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:76dc19b8923e825e0a50e32c59228c1b42827e770fbbc561a8f08a2fcd4722fa_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:b8f7cb6561e0577c0b5e06bd0304e00d7ae953dab395faa8928f5f21902afefd_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:c59180d8ab63901671ef112914eb38ccde6fc1649432cb7028e9282fe03409ec_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:0faed089022b06e67e0013d6fd171d1495117f7081ab0432492a04ec0162e22b_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:13eb206e1b9444217978c0895cabd4a54c6c7976cad6aadc4d8191fbf95513f9_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:29b4ce69fe85e81609e6ca7913a54f198c71f59cb0dbcc2aa6802c4d237c28bd_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:85668b4b3e5e91df4056702faf71a7981a6d9b1f77dac9b3c276288a2ddf0871_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:5a6420e67fa2ccc567e7421072ba1a6a3820ad3e964cef9d4ab09dfd02f34e30_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:bfcaee36b5c4b7a5e28f805a8063dcd9b7184cd633e042e4721a4313c36f2e82_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:d025df3add1287645833ef66bc9c992f08a9263cb9f48365ba82731fcefc5108_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:d1bd1dc3dc47bbed345db1cf76958104d23f3f1a23961f1f65e19c910aebeaf8_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:1b37ddf287b032e4ffe62096b1bebd03d6e1b955a983e3cb59d22f2c3fa8c6c9_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:3052464455752660000d20685dbb087544f2b60bbcf4c768e2e831c6f8777b1f_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:cf0fba7f83930c5b402de0af6335d950e5901219ab434c124eac73061a014354_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:f5895ae776750ed7b835825abc2b2ae0091462233c48f91bace88da473f9b0b6_s390x	—	Workaround

Threats

Impact Moderate

CVE-2026-82417

A flaw was found in qs. The `qs.stringify` function, responsible for serializing objects, does not properly validate the `isBuffer` property of an object's constructor before attempting to invoke it. An unauthenticated attacker can provide specially crafted input that, when processed and then serialized by `qs.stringify`, triggers a `TypeError`. This vulnerability can lead to a Denial of Service (DoS), causing affected applications to return a 500 error or, in certain scenarios, terminate the application process.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1287 - Improper Validation of Specified Type of Input

Affected products

Fixed 16 products, the same list as for CVE-2026-19534

Known not affected 81 products, the same list as for CVE-2026-19534

Threats

Impact Important

CVE-2026-84292

A flaw was found in fast-uri. This component improperly serializes the port component of a Uniform Resource Identifier (URI) without validating its content. A remote attacker can exploit this by crafting a malicious port value that injects authority delimiters. This manipulation can demote the intended host to user information and redirect the authority to an attacker-controlled host, leading to information disclosure as applications interpret the attacker's host as legitimate.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-140 - Improper Neutralization of Delimiters

Affected products

Fixed 16 products, the same list as for CVE-2026-19534

Known not affected 81 products, the same list as for CVE-2026-19534

Threats

Impact Important

CVE-2026-84304

A flaw was found in gRPC-Go. This vulnerability allows an unauthenticated remote attacker to exhaust process memory by sending millions of fragmented HTTP/2 DATA frames. Each fragmented frame is stored as a separate message, consuming disproportionate heap memory. This can lead to a runtime panic or out-of-memory termination, resulting in a Denial of Service (DoS).

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 12 products

Product	Version	Remediation
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:443fa9ebb6ac2ca2c840842d6679479fc5955464908e261d44177569eff9c8af_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:49be19a20112c2ca843ea67c984fd880ab18911ef3b8757ea05961fb7379b3c3_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:7c939c36153a034eb48b6d6269905bba69ba3991c50e2904f7e943ee5ad6ba57_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:86c1cd15321eaee9004490e5abbc4c3b766518d488e924981f61bcb70c135876_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:5b46489d5cea06c76497c5c8fcc535ad807b1c76734e493d0e066e23aec373ad_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:85f18ee14b931d2df20cd7b694467c53cf40864a057bc790b67b547fdd8beb39_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:b0281c14e6eb30e6ada9224f1c56c01bb101362adaecf46a9143245dd6c32b8c_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:ffd398dc9520463d713db4e2e1aefc6a6bb6c7b03694b69273f7296705ea51e2_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:27c2265f15c17641f0ba8743270b87e21ef0b9c85d50b48284a4450e7a7c67e7_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:76dc19b8923e825e0a50e32c59228c1b42827e770fbbc561a8f08a2fcd4722fa_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:b8f7cb6561e0577c0b5e06bd0304e00d7ae953dab395faa8928f5f21902afefd_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:c59180d8ab63901671ef112914eb38ccde6fc1649432cb7028e9282fe03409ec_arm64	—	Vendor Fix fix Workaround

Known not affected 85 products

Product	Version	Remediation
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:71bb4ed581f561262b23378f567e6b6c783c4d06c6958e42b906ca483ca78c93_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:9ac39e9d927feeccad720d8df32e8ad846a71901f6a252f6fc2458a0ed17c968_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b809d399db0cc42ca196365b4378e980d79f76d5957b6ba5d5c5660a71e49eb6_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:eb2d75c47058bbfcde2954ac6da8c1972c5de064cb3d7cc2673ad416d932d6fe_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:128cdae616cbd3b5c2c968b22485d7be0f051a4d7a2607c119d503849270db5e_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6372300ace8311564286b4b827dfb15def13071e86383809463cd60275102139_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8efbf2da142d24a1d4613a77f1dfe71b0be2c8c49aedef4d30a00ca62b32aa2a_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b0170f5f2a06fbf06e6c9b8a3aa6c9cb688c1934c1c6f8c3205e2b726024d9d9_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:73b359fbdf2c41877502c8eb795aeae868a9093b4358ab3ee6aa90e15e7873b2_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:70453cda0ffc3424177410281d43b0671eeb5bfde6e4294e2ec28d71653f68b7_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:76486b5692ce55d8b00f61d28cf60e6917a8dc878d8cf6788f170184ffd21839_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:98db286472d5466d241779d0082b57315ff752827761b287993393fa89e369c1_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:a48bd2e1b73405629fe476f83dbb9c707099b42a9d1ef824941ced101a42ff50_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2cd4f2e7687f9631565357bd5b875f70ed856e4b335c201505e6dc57c679af6d_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:62d939562320165babf6b42bb07b1d69d71a5ada621f4beda36a7cdbf41ca452_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:a3e274a01780864f4fa58cc8e3340cc36168968c980b358d2d718d82818b7705_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:e0a36f410898d1ee979dffae62709839d5df6da9643b9cf6074ab3406078fc5c_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:58cf1dac74338e0db4751c90707f4b1c3d93cd6b2d2cb02695e17c4e84f5f5fa_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:65083d63d2413e2d9ff635f7e5a8062ea668fd4c8155d32c787d6f01b473be0a_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:77eed66a0b274ab229ae986813879d1c2f203cbb16623910160d359b05893ec3_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:90c42f2bdbcd27ea4fa0c4dbd55af121b67a0ea7540ebaad30a6ca20a6c3b498_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:20639404ef198fb65a9cad2ccdf07a0ef7383b031ec302472852ceca732f0689_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:acc3365766546d7ee81ca555c78cb2f46856d868efb0a3e7d60511ee5feb2f0f_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:b4350e929666ac7580d6672b4962062b836b82126566d40376da39da3a6c557c_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:bf37ef2edbda7e52c8a54773039bc2058429b61ec95ca6d21a9c39e706db6ca7_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:42b644586b27110dcdc4df205ca5944faf57fe07526acbd1b2f41b70c3e351a1_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:9a7d564ede6c8191fa7e92da021a93978d45f143d5ebfb77ae2eea8761c0af55_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:9af8fdccfbfb9f96191db3d3b6045eb1ffc9f2c320079d2841d0f28e728e0b35_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b2202c1817f1ddaac354bbd0f432e2086bcdfe46543d63e5339356696deb7de5_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:5351f576c10e79f668e11b8287c8333df95b26a36a77db74dd0a3f5376077c06_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:842d95108842a05c1310f514ebb3b6b93471a093c0f923f827638025c1879795_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:868aef34bf4b6afc9dd353ae5b66834707250b6d003f458da03ed12f1947eb9f_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:c7b1f910847ee333768cb947738e9eb34abfec1397ea346eafa289094d229f1c_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:349c911c5bc5fbb5ea0000b2c939eed2ba2e190f911d2549bc554295176b2b42_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:4875990d931e8aec312b8f983bfefe3a635e4b94fc0e124bf0aae09b62ac6b6f_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:79d4fc632872c0318156f5618d24c3786960fb7393abb25d9ec01208709610eb_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:c57650cde2f0d81539f67d31011468cf04af38c2f7e0b57e12988da4c455cb15_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:019c2e3c17a20166f3c207caca8c6b26a83c93e57141e4bf75553df6586d7a8a_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:58a3da4874df410cf9d5ad99db7ba87bd07144206388f408d9fbf1ebc95f9c03_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:5b89406f5817450acfe562d5006c1c00a8443ef8f4b9eee6326a7279420c3495_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:b9106f58d8ba6143393e1494e0f7d651d1360719e3c38b24005080981bfd27dc_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:4782aa11b8230e56729ec9bccfc4895a3343f7a42e24493b79b87eea09dd1da2_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:923ee684d8c97393b704e525c6ad4965df090c68ad1055d4a78323aea385ca18_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b0068fc5b41442eed9a545433553e2750c9bb150dd609568b8176e01603f7640_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:e974db96e70635d7a08bd1432903b0b6a9822702bda62015a8f96d2a59e2091c_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:0933ff0b400ed79c993a6175388eb5e251bcf50d401f64c7834d43733ad6ba93_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:96a023f63099eb8384a5cc77cd0abc7cb8e758c29d73d3ccb1a3e7e8dce32968_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:c049f1264a2b594ab78aee1edf308e01a55d3389bd333f304ba3470db4d1a898_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:f47e3ed2d1628242792cf4ccbf12d27c287a2598c73645a58e651c6880c55806_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6a6e33ae6d021bd2926eabe45a9128872036d981361c24b871002bc7a5305d12_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:926c07a18734c82bc5185cb8003aeeceeddfe55b793a430a48788c29be77c534_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:c48482927e28fcdc950a0d0e2761ffd992a37489cf3490e65250eb0828e205e0_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:cf73e3a3588ac1fef8363ae99b6b8cd7c05f8beac49f187210c506fd0c603867_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:14bddb6185b655aa31cf17ce23069c4ca921cdf2caea296b59cd7033e92d0590_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1c6c2ea48c21315a82362059ddf72e6d39f1b74e5f247ffbe5dfccbc489899d9_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:75f3cfee21c647347a00ed370bf48a37c5b91d86895bd357ea4f99c4571cab39_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:9361daf08d52df508e31c34d8989b1b588722ca557ba559913ce1a7b457c2953_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:4c4d34cb5d409591bde12c9d5610f746e3dad1d460d3fea9c613d0ae3f81d64f_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:602869c79b8b43e72a7e940c8bb088d91ecc1a448dd8c529baf3440ea9287559_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:90be25d82b8831bcd2baa1e5b2e37bf0c231e882885a1b568592dfb91bc58abf_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:db28988ba5225106449a05224d019cd25897385854230b7e39c7e3e4521093bd_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:06d3e779706d1187ecf1028b21883cb3d140a4357f8807dc8b8f011aad6f7f31_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:25d19e097b5ae0bc0d9e8f918bb5f1015ccdf77eb6d93350d3f0bcf1d7ee7937_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:3261677cb85bf9a87e4dc134396b71943e2e76821d0e35d7f8ddfa0cb4059140_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:e0f529589bf67cd7368bac7a2edb3c2e21423249c0514cff5e52e81c2b9fa11e_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:54487b1509a0e951b74d30953a3732aa1adbf30e2c42fcacd3097667c277917d_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:59a71e223a49140412f052606c790bea160795ebb7b641a6de3001da7068e0b0_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:77d5053f790356decfbaa8fb249896858629fb2841a2afec64e527b4f4239439_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f2b285b37154654fb219227d42a5016327a13f99e0a5a0d9c04e29acb97f6fe9_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:2f479a222750e381a350390a7409bddf8b7be82b84702d49fc88a066b6d7f579_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:d934b23a365583a2278e953b9caac94415a187cab398a671376e710d3848d960_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:e6b757f955568b429df8c11e5ea5d7307b7a31b76d062f4461b67837eb9883f1_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:f1ada4311455e4ad9fa66b5f702abe188cf85d06907580d3fcaa6a0628b11fb2_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:0faed089022b06e67e0013d6fd171d1495117f7081ab0432492a04ec0162e22b_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:13eb206e1b9444217978c0895cabd4a54c6c7976cad6aadc4d8191fbf95513f9_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:29b4ce69fe85e81609e6ca7913a54f198c71f59cb0dbcc2aa6802c4d237c28bd_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:85668b4b3e5e91df4056702faf71a7981a6d9b1f77dac9b3c276288a2ddf0871_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:5a6420e67fa2ccc567e7421072ba1a6a3820ad3e964cef9d4ab09dfd02f34e30_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:bfcaee36b5c4b7a5e28f805a8063dcd9b7184cd633e042e4721a4313c36f2e82_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:d025df3add1287645833ef66bc9c992f08a9263cb9f48365ba82731fcefc5108_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:d1bd1dc3dc47bbed345db1cf76958104d23f3f1a23961f1f65e19c910aebeaf8_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:1b37ddf287b032e4ffe62096b1bebd03d6e1b955a983e3cb59d22f2c3fa8c6c9_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:3052464455752660000d20685dbb087544f2b60bbcf4c768e2e831c6f8777b1f_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:cf0fba7f83930c5b402de0af6335d950e5901219ab434c124eac73061a014354_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:f5895ae776750ed7b835825abc2b2ae0091462233c48f91bace88da473f9b0b6_s390x	—	Workaround

Threats

Impact Important

CVE-2026-84375

A flaw was found in js-yaml, a JavaScript YAML parser. An attacker can exploit this by providing a specially crafted YAML document that causes the parser to perform excessive processing when handling merge keys with empty sources. This can lead to prolonged CPU consumption, effectively causing a denial of service (DoS) for applications that process untrusted YAML input.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-835 - Loop with Unreachable Exit Condition

Affected products

Fixed 4 products, the same list as for CVE-2026-75838

Known not affected 93 products, the same list as for CVE-2026-75838

Threats

Impact Moderate

CVE-2026-84445

A flaw was found in gRPC-Go. Servers created with xds.NewGRPCServer() can be exploited by a remote client sending a malformed RPC request that lacks the required :authority or Host headers. This can trigger an index-out-of-bounds panic, leading to the termination of the entire server process and a Denial of Service (DoS). In some deployments, this attack can be unauthenticated.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 12 products

Product	Version	Remediation
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:443fa9ebb6ac2ca2c840842d6679479fc5955464908e261d44177569eff9c8af_s390x	—	Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:49be19a20112c2ca843ea67c984fd880ab18911ef3b8757ea05961fb7379b3c3_amd64	—	Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:7c939c36153a034eb48b6d6269905bba69ba3991c50e2904f7e943ee5ad6ba57_ppc64le	—	Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:86c1cd15321eaee9004490e5abbc4c3b766518d488e924981f61bcb70c135876_arm64	—	Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:5351f576c10e79f668e11b8287c8333df95b26a36a77db74dd0a3f5376077c06_arm64	—	Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:842d95108842a05c1310f514ebb3b6b93471a093c0f923f827638025c1879795_s390x	—	Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:868aef34bf4b6afc9dd353ae5b66834707250b6d003f458da03ed12f1947eb9f_amd64	—	Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:c7b1f910847ee333768cb947738e9eb34abfec1397ea346eafa289094d229f1c_ppc64le	—	Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:0faed089022b06e67e0013d6fd171d1495117f7081ab0432492a04ec0162e22b_ppc64le	—	Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:13eb206e1b9444217978c0895cabd4a54c6c7976cad6aadc4d8191fbf95513f9_s390x	—	Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:29b4ce69fe85e81609e6ca7913a54f198c71f59cb0dbcc2aa6802c4d237c28bd_amd64	—	Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:85668b4b3e5e91df4056702faf71a7981a6d9b1f77dac9b3c276288a2ddf0871_arm64	—	Vendor Fix fix

Known not affected 85 products

Product	Identifier	Version	Remediation
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:71bb4ed581f561262b23378f567e6b6c783c4d06c6958e42b906ca483ca78c93_ppc64le		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:9ac39e9d927feeccad720d8df32e8ad846a71901f6a252f6fc2458a0ed17c968_arm64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b809d399db0cc42ca196365b4378e980d79f76d5957b6ba5d5c5660a71e49eb6_amd64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:eb2d75c47058bbfcde2954ac6da8c1972c5de064cb3d7cc2673ad416d932d6fe_s390x		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:128cdae616cbd3b5c2c968b22485d7be0f051a4d7a2607c119d503849270db5e_arm64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6372300ace8311564286b4b827dfb15def13071e86383809463cd60275102139_ppc64le		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8efbf2da142d24a1d4613a77f1dfe71b0be2c8c49aedef4d30a00ca62b32aa2a_amd64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b0170f5f2a06fbf06e6c9b8a3aa6c9cb688c1934c1c6f8c3205e2b726024d9d9_s390x		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:73b359fbdf2c41877502c8eb795aeae868a9093b4358ab3ee6aa90e15e7873b2_amd64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:70453cda0ffc3424177410281d43b0671eeb5bfde6e4294e2ec28d71653f68b7_ppc64le		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:76486b5692ce55d8b00f61d28cf60e6917a8dc878d8cf6788f170184ffd21839_arm64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:98db286472d5466d241779d0082b57315ff752827761b287993393fa89e369c1_amd64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:a48bd2e1b73405629fe476f83dbb9c707099b42a9d1ef824941ced101a42ff50_s390x		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2cd4f2e7687f9631565357bd5b875f70ed856e4b335c201505e6dc57c679af6d_arm64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:62d939562320165babf6b42bb07b1d69d71a5ada621f4beda36a7cdbf41ca452_ppc64le		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:a3e274a01780864f4fa58cc8e3340cc36168968c980b358d2d718d82818b7705_s390x		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:e0a36f410898d1ee979dffae62709839d5df6da9643b9cf6074ab3406078fc5c_amd64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:58cf1dac74338e0db4751c90707f4b1c3d93cd6b2d2cb02695e17c4e84f5f5fa_arm64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:65083d63d2413e2d9ff635f7e5a8062ea668fd4c8155d32c787d6f01b473be0a_ppc64le		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:77eed66a0b274ab229ae986813879d1c2f203cbb16623910160d359b05893ec3_s390x		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:90c42f2bdbcd27ea4fa0c4dbd55af121b67a0ea7540ebaad30a6ca20a6c3b498_amd64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:20639404ef198fb65a9cad2ccdf07a0ef7383b031ec302472852ceca732f0689_ppc64le		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:acc3365766546d7ee81ca555c78cb2f46856d868efb0a3e7d60511ee5feb2f0f_amd64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:b4350e929666ac7580d6672b4962062b836b82126566d40376da39da3a6c557c_s390x		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:bf37ef2edbda7e52c8a54773039bc2058429b61ec95ca6d21a9c39e706db6ca7_arm64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:42b644586b27110dcdc4df205ca5944faf57fe07526acbd1b2f41b70c3e351a1_s390x		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:9a7d564ede6c8191fa7e92da021a93978d45f143d5ebfb77ae2eea8761c0af55_ppc64le		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:9af8fdccfbfb9f96191db3d3b6045eb1ffc9f2c320079d2841d0f28e728e0b35_arm64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b2202c1817f1ddaac354bbd0f432e2086bcdfe46543d63e5339356696deb7de5_amd64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:349c911c5bc5fbb5ea0000b2c939eed2ba2e190f911d2549bc554295176b2b42_arm64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:4875990d931e8aec312b8f983bfefe3a635e4b94fc0e124bf0aae09b62ac6b6f_ppc64le		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:79d4fc632872c0318156f5618d24c3786960fb7393abb25d9ec01208709610eb_s390x		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:c57650cde2f0d81539f67d31011468cf04af38c2f7e0b57e12988da4c455cb15_amd64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:019c2e3c17a20166f3c207caca8c6b26a83c93e57141e4bf75553df6586d7a8a_amd64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:58a3da4874df410cf9d5ad99db7ba87bd07144206388f408d9fbf1ebc95f9c03_s390x		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:5b89406f5817450acfe562d5006c1c00a8443ef8f4b9eee6326a7279420c3495_arm64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:b9106f58d8ba6143393e1494e0f7d651d1360719e3c38b24005080981bfd27dc_ppc64le		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:4782aa11b8230e56729ec9bccfc4895a3343f7a42e24493b79b87eea09dd1da2_arm64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:923ee684d8c97393b704e525c6ad4965df090c68ad1055d4a78323aea385ca18_amd64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b0068fc5b41442eed9a545433553e2750c9bb150dd609568b8176e01603f7640_ppc64le		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:e974db96e70635d7a08bd1432903b0b6a9822702bda62015a8f96d2a59e2091c_s390x		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:0933ff0b400ed79c993a6175388eb5e251bcf50d401f64c7834d43733ad6ba93_ppc64le		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:96a023f63099eb8384a5cc77cd0abc7cb8e758c29d73d3ccb1a3e7e8dce32968_arm64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:c049f1264a2b594ab78aee1edf308e01a55d3389bd333f304ba3470db4d1a898_amd64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:f47e3ed2d1628242792cf4ccbf12d27c287a2598c73645a58e651c6880c55806_s390x		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6a6e33ae6d021bd2926eabe45a9128872036d981361c24b871002bc7a5305d12_amd64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:926c07a18734c82bc5185cb8003aeeceeddfe55b793a430a48788c29be77c534_s390x		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:c48482927e28fcdc950a0d0e2761ffd992a37489cf3490e65250eb0828e205e0_ppc64le		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:cf73e3a3588ac1fef8363ae99b6b8cd7c05f8beac49f187210c506fd0c603867_arm64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:14bddb6185b655aa31cf17ce23069c4ca921cdf2caea296b59cd7033e92d0590_amd64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1c6c2ea48c21315a82362059ddf72e6d39f1b74e5f247ffbe5dfccbc489899d9_s390x		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:75f3cfee21c647347a00ed370bf48a37c5b91d86895bd357ea4f99c4571cab39_ppc64le		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:9361daf08d52df508e31c34d8989b1b588722ca557ba559913ce1a7b457c2953_arm64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:4c4d34cb5d409591bde12c9d5610f746e3dad1d460d3fea9c613d0ae3f81d64f_ppc64le		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:602869c79b8b43e72a7e940c8bb088d91ecc1a448dd8c529baf3440ea9287559_arm64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:90be25d82b8831bcd2baa1e5b2e37bf0c231e882885a1b568592dfb91bc58abf_amd64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:db28988ba5225106449a05224d019cd25897385854230b7e39c7e3e4521093bd_s390x		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:06d3e779706d1187ecf1028b21883cb3d140a4357f8807dc8b8f011aad6f7f31_arm64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:25d19e097b5ae0bc0d9e8f918bb5f1015ccdf77eb6d93350d3f0bcf1d7ee7937_amd64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:3261677cb85bf9a87e4dc134396b71943e2e76821d0e35d7f8ddfa0cb4059140_s390x		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:e0f529589bf67cd7368bac7a2edb3c2e21423249c0514cff5e52e81c2b9fa11e_ppc64le		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:5b46489d5cea06c76497c5c8fcc535ad807b1c76734e493d0e066e23aec373ad_amd64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:85f18ee14b931d2df20cd7b694467c53cf40864a057bc790b67b547fdd8beb39_s390x		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:b0281c14e6eb30e6ada9224f1c56c01bb101362adaecf46a9143245dd6c32b8c_arm64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:ffd398dc9520463d713db4e2e1aefc6a6bb6c7b03694b69273f7296705ea51e2_ppc64le		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:54487b1509a0e951b74d30953a3732aa1adbf30e2c42fcacd3097667c277917d_arm64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:59a71e223a49140412f052606c790bea160795ebb7b641a6de3001da7068e0b0_amd64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:77d5053f790356decfbaa8fb249896858629fb2841a2afec64e527b4f4239439_ppc64le		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f2b285b37154654fb219227d42a5016327a13f99e0a5a0d9c04e29acb97f6fe9_s390x		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:2f479a222750e381a350390a7409bddf8b7be82b84702d49fc88a066b6d7f579_ppc64le		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:d934b23a365583a2278e953b9caac94415a187cab398a671376e710d3848d960_amd64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:e6b757f955568b429df8c11e5ea5d7307b7a31b76d062f4461b67837eb9883f1_s390x		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:f1ada4311455e4ad9fa66b5f702abe188cf85d06907580d3fcaa6a0628b11fb2_arm64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:27c2265f15c17641f0ba8743270b87e21ef0b9c85d50b48284a4450e7a7c67e7_ppc64le		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:76dc19b8923e825e0a50e32c59228c1b42827e770fbbc561a8f08a2fcd4722fa_amd64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:b8f7cb6561e0577c0b5e06bd0304e00d7ae953dab395faa8928f5f21902afefd_s390x		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:c59180d8ab63901671ef112914eb38ccde6fc1649432cb7028e9282fe03409ec_arm64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:5a6420e67fa2ccc567e7421072ba1a6a3820ad3e964cef9d4ab09dfd02f34e30_arm64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:bfcaee36b5c4b7a5e28f805a8063dcd9b7184cd633e042e4721a4313c36f2e82_ppc64le		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:d025df3add1287645833ef66bc9c992f08a9263cb9f48365ba82731fcefc5108_s390x		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:d1bd1dc3dc47bbed345db1cf76958104d23f3f1a23961f1f65e19c910aebeaf8_amd64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:1b37ddf287b032e4ffe62096b1bebd03d6e1b955a983e3cb59d22f2c3fa8c6c9_amd64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:3052464455752660000d20685dbb087544f2b60bbcf4c768e2e831c6f8777b1f_ppc64le		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:cf0fba7f83930c5b402de0af6335d950e5901219ab434c124eac73061a014354_arm64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:f5895ae776750ed7b835825abc2b2ae0091462233c48f91bace88da473f9b0b6_s390x		—

Threats

Impact Important

CVE-2026-84961

A flaw was found in undici's BalancedPool component. This vulnerability allows a remote attacker to bypass Transport Layer Security (TLS) certificate validation. The BalancedPool constructor incorrectly processes its options, silently discarding custom certificate validation functions. Consequently, a peer with an otherwise untrusted certificate may be accepted, potentially compromising the integrity of secure communication.

7.4 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-295 - Improper Certificate Validation

Affected products

Fixed 16 products, the same list as for CVE-2026-19534

Known not affected 81 products, the same list as for CVE-2026-19534

Threats

Impact Important

CVE-2026-85152

A flaw was found in undici. When the cache or deduplicate interceptor is directly composed onto a Client or Pool, the destination origin is omitted from cache and request-deduplication keys. This allows a remote attacker to perform cross-origin cache poisoning, leading to information disclosure and potentially a full authentication bypass. An attacker could exploit this by having a trusted origin accept a malicious token, without contacting the legitimate trusted origin.

7.4 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-346 - Origin Validation Error

Affected products

Fixed 12 products

Product	Version	Remediation
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2cd4f2e7687f9631565357bd5b875f70ed856e4b335c201505e6dc57c679af6d_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:62d939562320165babf6b42bb07b1d69d71a5ada621f4beda36a7cdbf41ca452_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:a3e274a01780864f4fa58cc8e3340cc36168968c980b358d2d718d82818b7705_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:e0a36f410898d1ee979dffae62709839d5df6da9643b9cf6074ab3406078fc5c_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:58cf1dac74338e0db4751c90707f4b1c3d93cd6b2d2cb02695e17c4e84f5f5fa_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:65083d63d2413e2d9ff635f7e5a8062ea668fd4c8155d32c787d6f01b473be0a_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:77eed66a0b274ab229ae986813879d1c2f203cbb16623910160d359b05893ec3_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:90c42f2bdbcd27ea4fa0c4dbd55af121b67a0ea7540ebaad30a6ca20a6c3b498_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:20639404ef198fb65a9cad2ccdf07a0ef7383b031ec302472852ceca732f0689_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:acc3365766546d7ee81ca555c78cb2f46856d868efb0a3e7d60511ee5feb2f0f_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:b4350e929666ac7580d6672b4962062b836b82126566d40376da39da3a6c557c_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:bf37ef2edbda7e52c8a54773039bc2058429b61ec95ca6d21a9c39e706db6ca7_arm64	—	Vendor Fix fix Workaround

Known not affected 85 products

Product	Version	Remediation
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:71bb4ed581f561262b23378f567e6b6c783c4d06c6958e42b906ca483ca78c93_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:9ac39e9d927feeccad720d8df32e8ad846a71901f6a252f6fc2458a0ed17c968_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b809d399db0cc42ca196365b4378e980d79f76d5957b6ba5d5c5660a71e49eb6_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:eb2d75c47058bbfcde2954ac6da8c1972c5de064cb3d7cc2673ad416d932d6fe_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:128cdae616cbd3b5c2c968b22485d7be0f051a4d7a2607c119d503849270db5e_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6372300ace8311564286b4b827dfb15def13071e86383809463cd60275102139_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8efbf2da142d24a1d4613a77f1dfe71b0be2c8c49aedef4d30a00ca62b32aa2a_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b0170f5f2a06fbf06e6c9b8a3aa6c9cb688c1934c1c6f8c3205e2b726024d9d9_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:73b359fbdf2c41877502c8eb795aeae868a9093b4358ab3ee6aa90e15e7873b2_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:443fa9ebb6ac2ca2c840842d6679479fc5955464908e261d44177569eff9c8af_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:49be19a20112c2ca843ea67c984fd880ab18911ef3b8757ea05961fb7379b3c3_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:7c939c36153a034eb48b6d6269905bba69ba3991c50e2904f7e943ee5ad6ba57_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:86c1cd15321eaee9004490e5abbc4c3b766518d488e924981f61bcb70c135876_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:70453cda0ffc3424177410281d43b0671eeb5bfde6e4294e2ec28d71653f68b7_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:76486b5692ce55d8b00f61d28cf60e6917a8dc878d8cf6788f170184ffd21839_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:98db286472d5466d241779d0082b57315ff752827761b287993393fa89e369c1_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:a48bd2e1b73405629fe476f83dbb9c707099b42a9d1ef824941ced101a42ff50_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:42b644586b27110dcdc4df205ca5944faf57fe07526acbd1b2f41b70c3e351a1_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:9a7d564ede6c8191fa7e92da021a93978d45f143d5ebfb77ae2eea8761c0af55_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:9af8fdccfbfb9f96191db3d3b6045eb1ffc9f2c320079d2841d0f28e728e0b35_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b2202c1817f1ddaac354bbd0f432e2086bcdfe46543d63e5339356696deb7de5_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:5351f576c10e79f668e11b8287c8333df95b26a36a77db74dd0a3f5376077c06_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:842d95108842a05c1310f514ebb3b6b93471a093c0f923f827638025c1879795_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:868aef34bf4b6afc9dd353ae5b66834707250b6d003f458da03ed12f1947eb9f_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:c7b1f910847ee333768cb947738e9eb34abfec1397ea346eafa289094d229f1c_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:349c911c5bc5fbb5ea0000b2c939eed2ba2e190f911d2549bc554295176b2b42_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:4875990d931e8aec312b8f983bfefe3a635e4b94fc0e124bf0aae09b62ac6b6f_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:79d4fc632872c0318156f5618d24c3786960fb7393abb25d9ec01208709610eb_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:c57650cde2f0d81539f67d31011468cf04af38c2f7e0b57e12988da4c455cb15_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:019c2e3c17a20166f3c207caca8c6b26a83c93e57141e4bf75553df6586d7a8a_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:58a3da4874df410cf9d5ad99db7ba87bd07144206388f408d9fbf1ebc95f9c03_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:5b89406f5817450acfe562d5006c1c00a8443ef8f4b9eee6326a7279420c3495_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:b9106f58d8ba6143393e1494e0f7d651d1360719e3c38b24005080981bfd27dc_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:4782aa11b8230e56729ec9bccfc4895a3343f7a42e24493b79b87eea09dd1da2_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:923ee684d8c97393b704e525c6ad4965df090c68ad1055d4a78323aea385ca18_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b0068fc5b41442eed9a545433553e2750c9bb150dd609568b8176e01603f7640_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:e974db96e70635d7a08bd1432903b0b6a9822702bda62015a8f96d2a59e2091c_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:0933ff0b400ed79c993a6175388eb5e251bcf50d401f64c7834d43733ad6ba93_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:96a023f63099eb8384a5cc77cd0abc7cb8e758c29d73d3ccb1a3e7e8dce32968_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:c049f1264a2b594ab78aee1edf308e01a55d3389bd333f304ba3470db4d1a898_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:f47e3ed2d1628242792cf4ccbf12d27c287a2598c73645a58e651c6880c55806_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6a6e33ae6d021bd2926eabe45a9128872036d981361c24b871002bc7a5305d12_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:926c07a18734c82bc5185cb8003aeeceeddfe55b793a430a48788c29be77c534_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:c48482927e28fcdc950a0d0e2761ffd992a37489cf3490e65250eb0828e205e0_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:cf73e3a3588ac1fef8363ae99b6b8cd7c05f8beac49f187210c506fd0c603867_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:14bddb6185b655aa31cf17ce23069c4ca921cdf2caea296b59cd7033e92d0590_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1c6c2ea48c21315a82362059ddf72e6d39f1b74e5f247ffbe5dfccbc489899d9_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:75f3cfee21c647347a00ed370bf48a37c5b91d86895bd357ea4f99c4571cab39_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:9361daf08d52df508e31c34d8989b1b588722ca557ba559913ce1a7b457c2953_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:4c4d34cb5d409591bde12c9d5610f746e3dad1d460d3fea9c613d0ae3f81d64f_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:602869c79b8b43e72a7e940c8bb088d91ecc1a448dd8c529baf3440ea9287559_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:90be25d82b8831bcd2baa1e5b2e37bf0c231e882885a1b568592dfb91bc58abf_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:db28988ba5225106449a05224d019cd25897385854230b7e39c7e3e4521093bd_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:06d3e779706d1187ecf1028b21883cb3d140a4357f8807dc8b8f011aad6f7f31_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:25d19e097b5ae0bc0d9e8f918bb5f1015ccdf77eb6d93350d3f0bcf1d7ee7937_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:3261677cb85bf9a87e4dc134396b71943e2e76821d0e35d7f8ddfa0cb4059140_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:e0f529589bf67cd7368bac7a2edb3c2e21423249c0514cff5e52e81c2b9fa11e_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:5b46489d5cea06c76497c5c8fcc535ad807b1c76734e493d0e066e23aec373ad_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:85f18ee14b931d2df20cd7b694467c53cf40864a057bc790b67b547fdd8beb39_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:b0281c14e6eb30e6ada9224f1c56c01bb101362adaecf46a9143245dd6c32b8c_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:ffd398dc9520463d713db4e2e1aefc6a6bb6c7b03694b69273f7296705ea51e2_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:54487b1509a0e951b74d30953a3732aa1adbf30e2c42fcacd3097667c277917d_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:59a71e223a49140412f052606c790bea160795ebb7b641a6de3001da7068e0b0_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:77d5053f790356decfbaa8fb249896858629fb2841a2afec64e527b4f4239439_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f2b285b37154654fb219227d42a5016327a13f99e0a5a0d9c04e29acb97f6fe9_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:2f479a222750e381a350390a7409bddf8b7be82b84702d49fc88a066b6d7f579_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:d934b23a365583a2278e953b9caac94415a187cab398a671376e710d3848d960_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:e6b757f955568b429df8c11e5ea5d7307b7a31b76d062f4461b67837eb9883f1_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:f1ada4311455e4ad9fa66b5f702abe188cf85d06907580d3fcaa6a0628b11fb2_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:27c2265f15c17641f0ba8743270b87e21ef0b9c85d50b48284a4450e7a7c67e7_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:76dc19b8923e825e0a50e32c59228c1b42827e770fbbc561a8f08a2fcd4722fa_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:b8f7cb6561e0577c0b5e06bd0304e00d7ae953dab395faa8928f5f21902afefd_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:c59180d8ab63901671ef112914eb38ccde6fc1649432cb7028e9282fe03409ec_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:0faed089022b06e67e0013d6fd171d1495117f7081ab0432492a04ec0162e22b_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:13eb206e1b9444217978c0895cabd4a54c6c7976cad6aadc4d8191fbf95513f9_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:29b4ce69fe85e81609e6ca7913a54f198c71f59cb0dbcc2aa6802c4d237c28bd_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:85668b4b3e5e91df4056702faf71a7981a6d9b1f77dac9b3c276288a2ddf0871_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:5a6420e67fa2ccc567e7421072ba1a6a3820ad3e964cef9d4ab09dfd02f34e30_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:bfcaee36b5c4b7a5e28f805a8063dcd9b7184cd633e042e4721a4313c36f2e82_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:d025df3add1287645833ef66bc9c992f08a9263cb9f48365ba82731fcefc5108_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:d1bd1dc3dc47bbed345db1cf76958104d23f3f1a23961f1f65e19c910aebeaf8_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:1b37ddf287b032e4ffe62096b1bebd03d6e1b955a983e3cb59d22f2c3fa8c6c9_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:3052464455752660000d20685dbb087544f2b60bbcf4c768e2e831c6f8777b1f_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:cf0fba7f83930c5b402de0af6335d950e5901219ab434c124eac73061a014354_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:f5895ae776750ed7b835825abc2b2ae0091462233c48f91bace88da473f9b0b6_s390x	—	Workaround

Threats

Impact Important

CVE-2026-87018

A flaw was found in undici. A remote server can cause a Denial of Service (DoS) by initiating a Transport Layer Security (TLS) renegotiation and presenting a certificate with a mismatched hostname. Because the client application fails to properly handle the resulting verification error, an uncaught assertion is triggered, terminating the client process and disrupting active network requests.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-617 - Reachable Assertion

Affected products

Fixed 32 products

Product	Version	Remediation
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2cd4f2e7687f9631565357bd5b875f70ed856e4b335c201505e6dc57c679af6d_arm64	—	Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:62d939562320165babf6b42bb07b1d69d71a5ada621f4beda36a7cdbf41ca452_ppc64le	—	Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:a3e274a01780864f4fa58cc8e3340cc36168968c980b358d2d718d82818b7705_s390x	—	Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:e0a36f410898d1ee979dffae62709839d5df6da9643b9cf6074ab3406078fc5c_amd64	—	Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:58cf1dac74338e0db4751c90707f4b1c3d93cd6b2d2cb02695e17c4e84f5f5fa_arm64	—	Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:65083d63d2413e2d9ff635f7e5a8062ea668fd4c8155d32c787d6f01b473be0a_ppc64le	—	Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:77eed66a0b274ab229ae986813879d1c2f203cbb16623910160d359b05893ec3_s390x	—	Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:90c42f2bdbcd27ea4fa0c4dbd55af121b67a0ea7540ebaad30a6ca20a6c3b498_amd64	—	Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:20639404ef198fb65a9cad2ccdf07a0ef7383b031ec302472852ceca732f0689_ppc64le	—	Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:acc3365766546d7ee81ca555c78cb2f46856d868efb0a3e7d60511ee5feb2f0f_amd64	—	Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:b4350e929666ac7580d6672b4962062b836b82126566d40376da39da3a6c557c_s390x	—	Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:bf37ef2edbda7e52c8a54773039bc2058429b61ec95ca6d21a9c39e706db6ca7_arm64	—	Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:42b644586b27110dcdc4df205ca5944faf57fe07526acbd1b2f41b70c3e351a1_s390x	—	Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:9a7d564ede6c8191fa7e92da021a93978d45f143d5ebfb77ae2eea8761c0af55_ppc64le	—	Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:9af8fdccfbfb9f96191db3d3b6045eb1ffc9f2c320079d2841d0f28e728e0b35_arm64	—	Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b2202c1817f1ddaac354bbd0f432e2086bcdfe46543d63e5339356696deb7de5_amd64	—	Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:349c911c5bc5fbb5ea0000b2c939eed2ba2e190f911d2549bc554295176b2b42_arm64	—	Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:4875990d931e8aec312b8f983bfefe3a635e4b94fc0e124bf0aae09b62ac6b6f_ppc64le	—	Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:79d4fc632872c0318156f5618d24c3786960fb7393abb25d9ec01208709610eb_s390x	—	Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:c57650cde2f0d81539f67d31011468cf04af38c2f7e0b57e12988da4c455cb15_amd64	—	Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:0933ff0b400ed79c993a6175388eb5e251bcf50d401f64c7834d43733ad6ba93_ppc64le	—	Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:96a023f63099eb8384a5cc77cd0abc7cb8e758c29d73d3ccb1a3e7e8dce32968_arm64	—	Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:c049f1264a2b594ab78aee1edf308e01a55d3389bd333f304ba3470db4d1a898_amd64	—	Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:f47e3ed2d1628242792cf4ccbf12d27c287a2598c73645a58e651c6880c55806_s390x	—	Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6a6e33ae6d021bd2926eabe45a9128872036d981361c24b871002bc7a5305d12_amd64	—	Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:926c07a18734c82bc5185cb8003aeeceeddfe55b793a430a48788c29be77c534_s390x	—	Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:c48482927e28fcdc950a0d0e2761ffd992a37489cf3490e65250eb0828e205e0_ppc64le	—	Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:cf73e3a3588ac1fef8363ae99b6b8cd7c05f8beac49f187210c506fd0c603867_arm64	—	Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:14bddb6185b655aa31cf17ce23069c4ca921cdf2caea296b59cd7033e92d0590_amd64	—	Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1c6c2ea48c21315a82362059ddf72e6d39f1b74e5f247ffbe5dfccbc489899d9_s390x	—	Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:75f3cfee21c647347a00ed370bf48a37c5b91d86895bd357ea4f99c4571cab39_ppc64le	—	Vendor Fix fix
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:9361daf08d52df508e31c34d8989b1b588722ca557ba559913ce1a7b457c2953_arm64	—	Vendor Fix fix

Known not affected 65 products

Product	Identifier	Version	Remediation
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:71bb4ed581f561262b23378f567e6b6c783c4d06c6958e42b906ca483ca78c93_ppc64le		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:9ac39e9d927feeccad720d8df32e8ad846a71901f6a252f6fc2458a0ed17c968_arm64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b809d399db0cc42ca196365b4378e980d79f76d5957b6ba5d5c5660a71e49eb6_amd64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:eb2d75c47058bbfcde2954ac6da8c1972c5de064cb3d7cc2673ad416d932d6fe_s390x		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:128cdae616cbd3b5c2c968b22485d7be0f051a4d7a2607c119d503849270db5e_arm64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6372300ace8311564286b4b827dfb15def13071e86383809463cd60275102139_ppc64le		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8efbf2da142d24a1d4613a77f1dfe71b0be2c8c49aedef4d30a00ca62b32aa2a_amd64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b0170f5f2a06fbf06e6c9b8a3aa6c9cb688c1934c1c6f8c3205e2b726024d9d9_s390x		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:73b359fbdf2c41877502c8eb795aeae868a9093b4358ab3ee6aa90e15e7873b2_amd64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:443fa9ebb6ac2ca2c840842d6679479fc5955464908e261d44177569eff9c8af_s390x		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:49be19a20112c2ca843ea67c984fd880ab18911ef3b8757ea05961fb7379b3c3_amd64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:7c939c36153a034eb48b6d6269905bba69ba3991c50e2904f7e943ee5ad6ba57_ppc64le		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:86c1cd15321eaee9004490e5abbc4c3b766518d488e924981f61bcb70c135876_arm64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:70453cda0ffc3424177410281d43b0671eeb5bfde6e4294e2ec28d71653f68b7_ppc64le		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:76486b5692ce55d8b00f61d28cf60e6917a8dc878d8cf6788f170184ffd21839_arm64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:98db286472d5466d241779d0082b57315ff752827761b287993393fa89e369c1_amd64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:a48bd2e1b73405629fe476f83dbb9c707099b42a9d1ef824941ced101a42ff50_s390x		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:5351f576c10e79f668e11b8287c8333df95b26a36a77db74dd0a3f5376077c06_arm64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:842d95108842a05c1310f514ebb3b6b93471a093c0f923f827638025c1879795_s390x		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:868aef34bf4b6afc9dd353ae5b66834707250b6d003f458da03ed12f1947eb9f_amd64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:c7b1f910847ee333768cb947738e9eb34abfec1397ea346eafa289094d229f1c_ppc64le		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:019c2e3c17a20166f3c207caca8c6b26a83c93e57141e4bf75553df6586d7a8a_amd64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:58a3da4874df410cf9d5ad99db7ba87bd07144206388f408d9fbf1ebc95f9c03_s390x		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:5b89406f5817450acfe562d5006c1c00a8443ef8f4b9eee6326a7279420c3495_arm64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:b9106f58d8ba6143393e1494e0f7d651d1360719e3c38b24005080981bfd27dc_ppc64le		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:4782aa11b8230e56729ec9bccfc4895a3343f7a42e24493b79b87eea09dd1da2_arm64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:923ee684d8c97393b704e525c6ad4965df090c68ad1055d4a78323aea385ca18_amd64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b0068fc5b41442eed9a545433553e2750c9bb150dd609568b8176e01603f7640_ppc64le		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:e974db96e70635d7a08bd1432903b0b6a9822702bda62015a8f96d2a59e2091c_s390x		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:4c4d34cb5d409591bde12c9d5610f746e3dad1d460d3fea9c613d0ae3f81d64f_ppc64le		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:602869c79b8b43e72a7e940c8bb088d91ecc1a448dd8c529baf3440ea9287559_arm64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:90be25d82b8831bcd2baa1e5b2e37bf0c231e882885a1b568592dfb91bc58abf_amd64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:db28988ba5225106449a05224d019cd25897385854230b7e39c7e3e4521093bd_s390x		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:06d3e779706d1187ecf1028b21883cb3d140a4357f8807dc8b8f011aad6f7f31_arm64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:25d19e097b5ae0bc0d9e8f918bb5f1015ccdf77eb6d93350d3f0bcf1d7ee7937_amd64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:3261677cb85bf9a87e4dc134396b71943e2e76821d0e35d7f8ddfa0cb4059140_s390x		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:e0f529589bf67cd7368bac7a2edb3c2e21423249c0514cff5e52e81c2b9fa11e_ppc64le		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:5b46489d5cea06c76497c5c8fcc535ad807b1c76734e493d0e066e23aec373ad_amd64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:85f18ee14b931d2df20cd7b694467c53cf40864a057bc790b67b547fdd8beb39_s390x		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:b0281c14e6eb30e6ada9224f1c56c01bb101362adaecf46a9143245dd6c32b8c_arm64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:ffd398dc9520463d713db4e2e1aefc6a6bb6c7b03694b69273f7296705ea51e2_ppc64le		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:54487b1509a0e951b74d30953a3732aa1adbf30e2c42fcacd3097667c277917d_arm64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:59a71e223a49140412f052606c790bea160795ebb7b641a6de3001da7068e0b0_amd64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:77d5053f790356decfbaa8fb249896858629fb2841a2afec64e527b4f4239439_ppc64le		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f2b285b37154654fb219227d42a5016327a13f99e0a5a0d9c04e29acb97f6fe9_s390x		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:2f479a222750e381a350390a7409bddf8b7be82b84702d49fc88a066b6d7f579_ppc64le		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:d934b23a365583a2278e953b9caac94415a187cab398a671376e710d3848d960_amd64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:e6b757f955568b429df8c11e5ea5d7307b7a31b76d062f4461b67837eb9883f1_s390x		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:f1ada4311455e4ad9fa66b5f702abe188cf85d06907580d3fcaa6a0628b11fb2_arm64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:27c2265f15c17641f0ba8743270b87e21ef0b9c85d50b48284a4450e7a7c67e7_ppc64le		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:76dc19b8923e825e0a50e32c59228c1b42827e770fbbc561a8f08a2fcd4722fa_amd64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:b8f7cb6561e0577c0b5e06bd0304e00d7ae953dab395faa8928f5f21902afefd_s390x		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:c59180d8ab63901671ef112914eb38ccde6fc1649432cb7028e9282fe03409ec_arm64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:0faed089022b06e67e0013d6fd171d1495117f7081ab0432492a04ec0162e22b_ppc64le		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:13eb206e1b9444217978c0895cabd4a54c6c7976cad6aadc4d8191fbf95513f9_s390x		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:29b4ce69fe85e81609e6ca7913a54f198c71f59cb0dbcc2aa6802c4d237c28bd_amd64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:85668b4b3e5e91df4056702faf71a7981a6d9b1f77dac9b3c276288a2ddf0871_arm64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:5a6420e67fa2ccc567e7421072ba1a6a3820ad3e964cef9d4ab09dfd02f34e30_arm64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:bfcaee36b5c4b7a5e28f805a8063dcd9b7184cd633e042e4721a4313c36f2e82_ppc64le		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:d025df3add1287645833ef66bc9c992f08a9263cb9f48365ba82731fcefc5108_s390x		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:d1bd1dc3dc47bbed345db1cf76958104d23f3f1a23961f1f65e19c910aebeaf8_amd64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:1b37ddf287b032e4ffe62096b1bebd03d6e1b955a983e3cb59d22f2c3fa8c6c9_amd64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:3052464455752660000d20685dbb087544f2b60bbcf4c768e2e831c6f8777b1f_ppc64le		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:cf0fba7f83930c5b402de0af6335d950e5901219ab434c124eac73061a014354_arm64		—
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:f5895ae776750ed7b835825abc2b2ae0091462233c48f91bace88da473f9b0b6_s390x		—

Threats

Impact Important

CVE-2026-102276

A flaw was found in brace-expansion. A remote attacker can provide specially crafted brace patterns with excessive nested groups or large arrays to trigger uncontrolled recursion during parsing. This behavior exhausts the native call stack and crashes the application process, leading to a Denial of Service (DoS).

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 12 products

Product	Version	Remediation
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2cd4f2e7687f9631565357bd5b875f70ed856e4b335c201505e6dc57c679af6d_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:62d939562320165babf6b42bb07b1d69d71a5ada621f4beda36a7cdbf41ca452_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:a3e274a01780864f4fa58cc8e3340cc36168968c980b358d2d718d82818b7705_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:e0a36f410898d1ee979dffae62709839d5df6da9643b9cf6074ab3406078fc5c_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:349c911c5bc5fbb5ea0000b2c939eed2ba2e190f911d2549bc554295176b2b42_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:4875990d931e8aec312b8f983bfefe3a635e4b94fc0e124bf0aae09b62ac6b6f_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:79d4fc632872c0318156f5618d24c3786960fb7393abb25d9ec01208709610eb_s390x	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:c57650cde2f0d81539f67d31011468cf04af38c2f7e0b57e12988da4c455cb15_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:4782aa11b8230e56729ec9bccfc4895a3343f7a42e24493b79b87eea09dd1da2_arm64	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:923ee684d8c97393b704e525c6ad4965df090c68ad1055d4a78323aea385ca18_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b0068fc5b41442eed9a545433553e2750c9bb150dd609568b8176e01603f7640_ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:e974db96e70635d7a08bd1432903b0b6a9822702bda62015a8f96d2a59e2091c_s390x	—	Vendor Fix fix Workaround

Known not affected 85 products

Product	Version	Remediation
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:71bb4ed581f561262b23378f567e6b6c783c4d06c6958e42b906ca483ca78c93_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:9ac39e9d927feeccad720d8df32e8ad846a71901f6a252f6fc2458a0ed17c968_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b809d399db0cc42ca196365b4378e980d79f76d5957b6ba5d5c5660a71e49eb6_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:eb2d75c47058bbfcde2954ac6da8c1972c5de064cb3d7cc2673ad416d932d6fe_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:128cdae616cbd3b5c2c968b22485d7be0f051a4d7a2607c119d503849270db5e_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6372300ace8311564286b4b827dfb15def13071e86383809463cd60275102139_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8efbf2da142d24a1d4613a77f1dfe71b0be2c8c49aedef4d30a00ca62b32aa2a_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b0170f5f2a06fbf06e6c9b8a3aa6c9cb688c1934c1c6f8c3205e2b726024d9d9_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:73b359fbdf2c41877502c8eb795aeae868a9093b4358ab3ee6aa90e15e7873b2_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:443fa9ebb6ac2ca2c840842d6679479fc5955464908e261d44177569eff9c8af_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:49be19a20112c2ca843ea67c984fd880ab18911ef3b8757ea05961fb7379b3c3_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:7c939c36153a034eb48b6d6269905bba69ba3991c50e2904f7e943ee5ad6ba57_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:86c1cd15321eaee9004490e5abbc4c3b766518d488e924981f61bcb70c135876_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:70453cda0ffc3424177410281d43b0671eeb5bfde6e4294e2ec28d71653f68b7_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:76486b5692ce55d8b00f61d28cf60e6917a8dc878d8cf6788f170184ffd21839_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:98db286472d5466d241779d0082b57315ff752827761b287993393fa89e369c1_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:a48bd2e1b73405629fe476f83dbb9c707099b42a9d1ef824941ced101a42ff50_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:58cf1dac74338e0db4751c90707f4b1c3d93cd6b2d2cb02695e17c4e84f5f5fa_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:65083d63d2413e2d9ff635f7e5a8062ea668fd4c8155d32c787d6f01b473be0a_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:77eed66a0b274ab229ae986813879d1c2f203cbb16623910160d359b05893ec3_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:90c42f2bdbcd27ea4fa0c4dbd55af121b67a0ea7540ebaad30a6ca20a6c3b498_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:20639404ef198fb65a9cad2ccdf07a0ef7383b031ec302472852ceca732f0689_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:acc3365766546d7ee81ca555c78cb2f46856d868efb0a3e7d60511ee5feb2f0f_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:b4350e929666ac7580d6672b4962062b836b82126566d40376da39da3a6c557c_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:bf37ef2edbda7e52c8a54773039bc2058429b61ec95ca6d21a9c39e706db6ca7_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:42b644586b27110dcdc4df205ca5944faf57fe07526acbd1b2f41b70c3e351a1_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:9a7d564ede6c8191fa7e92da021a93978d45f143d5ebfb77ae2eea8761c0af55_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:9af8fdccfbfb9f96191db3d3b6045eb1ffc9f2c320079d2841d0f28e728e0b35_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b2202c1817f1ddaac354bbd0f432e2086bcdfe46543d63e5339356696deb7de5_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:5351f576c10e79f668e11b8287c8333df95b26a36a77db74dd0a3f5376077c06_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:842d95108842a05c1310f514ebb3b6b93471a093c0f923f827638025c1879795_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:868aef34bf4b6afc9dd353ae5b66834707250b6d003f458da03ed12f1947eb9f_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:c7b1f910847ee333768cb947738e9eb34abfec1397ea346eafa289094d229f1c_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:019c2e3c17a20166f3c207caca8c6b26a83c93e57141e4bf75553df6586d7a8a_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:58a3da4874df410cf9d5ad99db7ba87bd07144206388f408d9fbf1ebc95f9c03_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:5b89406f5817450acfe562d5006c1c00a8443ef8f4b9eee6326a7279420c3495_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:b9106f58d8ba6143393e1494e0f7d651d1360719e3c38b24005080981bfd27dc_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:0933ff0b400ed79c993a6175388eb5e251bcf50d401f64c7834d43733ad6ba93_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:96a023f63099eb8384a5cc77cd0abc7cb8e758c29d73d3ccb1a3e7e8dce32968_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:c049f1264a2b594ab78aee1edf308e01a55d3389bd333f304ba3470db4d1a898_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:f47e3ed2d1628242792cf4ccbf12d27c287a2598c73645a58e651c6880c55806_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6a6e33ae6d021bd2926eabe45a9128872036d981361c24b871002bc7a5305d12_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:926c07a18734c82bc5185cb8003aeeceeddfe55b793a430a48788c29be77c534_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:c48482927e28fcdc950a0d0e2761ffd992a37489cf3490e65250eb0828e205e0_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:cf73e3a3588ac1fef8363ae99b6b8cd7c05f8beac49f187210c506fd0c603867_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:14bddb6185b655aa31cf17ce23069c4ca921cdf2caea296b59cd7033e92d0590_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1c6c2ea48c21315a82362059ddf72e6d39f1b74e5f247ffbe5dfccbc489899d9_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:75f3cfee21c647347a00ed370bf48a37c5b91d86895bd357ea4f99c4571cab39_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:9361daf08d52df508e31c34d8989b1b588722ca557ba559913ce1a7b457c2953_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:4c4d34cb5d409591bde12c9d5610f746e3dad1d460d3fea9c613d0ae3f81d64f_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:602869c79b8b43e72a7e940c8bb088d91ecc1a448dd8c529baf3440ea9287559_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:90be25d82b8831bcd2baa1e5b2e37bf0c231e882885a1b568592dfb91bc58abf_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:db28988ba5225106449a05224d019cd25897385854230b7e39c7e3e4521093bd_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:06d3e779706d1187ecf1028b21883cb3d140a4357f8807dc8b8f011aad6f7f31_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:25d19e097b5ae0bc0d9e8f918bb5f1015ccdf77eb6d93350d3f0bcf1d7ee7937_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:3261677cb85bf9a87e4dc134396b71943e2e76821d0e35d7f8ddfa0cb4059140_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:e0f529589bf67cd7368bac7a2edb3c2e21423249c0514cff5e52e81c2b9fa11e_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:5b46489d5cea06c76497c5c8fcc535ad807b1c76734e493d0e066e23aec373ad_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:85f18ee14b931d2df20cd7b694467c53cf40864a057bc790b67b547fdd8beb39_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:b0281c14e6eb30e6ada9224f1c56c01bb101362adaecf46a9143245dd6c32b8c_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:ffd398dc9520463d713db4e2e1aefc6a6bb6c7b03694b69273f7296705ea51e2_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:54487b1509a0e951b74d30953a3732aa1adbf30e2c42fcacd3097667c277917d_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:59a71e223a49140412f052606c790bea160795ebb7b641a6de3001da7068e0b0_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:77d5053f790356decfbaa8fb249896858629fb2841a2afec64e527b4f4239439_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f2b285b37154654fb219227d42a5016327a13f99e0a5a0d9c04e29acb97f6fe9_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:2f479a222750e381a350390a7409bddf8b7be82b84702d49fc88a066b6d7f579_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:d934b23a365583a2278e953b9caac94415a187cab398a671376e710d3848d960_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:e6b757f955568b429df8c11e5ea5d7307b7a31b76d062f4461b67837eb9883f1_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:f1ada4311455e4ad9fa66b5f702abe188cf85d06907580d3fcaa6a0628b11fb2_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:27c2265f15c17641f0ba8743270b87e21ef0b9c85d50b48284a4450e7a7c67e7_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:76dc19b8923e825e0a50e32c59228c1b42827e770fbbc561a8f08a2fcd4722fa_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:b8f7cb6561e0577c0b5e06bd0304e00d7ae953dab395faa8928f5f21902afefd_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:c59180d8ab63901671ef112914eb38ccde6fc1649432cb7028e9282fe03409ec_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:0faed089022b06e67e0013d6fd171d1495117f7081ab0432492a04ec0162e22b_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:13eb206e1b9444217978c0895cabd4a54c6c7976cad6aadc4d8191fbf95513f9_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:29b4ce69fe85e81609e6ca7913a54f198c71f59cb0dbcc2aa6802c4d237c28bd_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:85668b4b3e5e91df4056702faf71a7981a6d9b1f77dac9b3c276288a2ddf0871_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:5a6420e67fa2ccc567e7421072ba1a6a3820ad3e964cef9d4ab09dfd02f34e30_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:bfcaee36b5c4b7a5e28f805a8063dcd9b7184cd633e042e4721a4313c36f2e82_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:d025df3add1287645833ef66bc9c992f08a9263cb9f48365ba82731fcefc5108_s390x	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:d1bd1dc3dc47bbed345db1cf76958104d23f3f1a23961f1f65e19c910aebeaf8_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:1b37ddf287b032e4ffe62096b1bebd03d6e1b955a983e3cb59d22f2c3fa8c6c9_amd64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:3052464455752660000d20685dbb087544f2b60bbcf4c768e2e831c6f8777b1f_ppc64le	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:cf0fba7f83930c5b402de0af6335d950e5901219ab434c124eac73061a014354_arm64	—	Workaround
Unresolved product id: Cluster Observability Operator 1.5:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:f5895ae776750ed7b835825abc2b2ae0091462233c48f91bace88da473f9b0b6_s390x	—	Workaround

Threats

Impact Important

CVE-2026-102278

A flaw was found in brace-expansion. A remote attacker can cause a Denial of Service (DoS) by supplying untrusted input containing deeply nested brace patterns. Due to uncontrolled recursion during pattern processing, expanding these nested structures exhausts the call stack and causes the application to crash.

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 12 products, the same list as for CVE-2026-102276

Known not affected 85 products, the same list as for CVE-2026-102276

Threats

Impact Important

CVE-2026-109383

A flaw was found in undici. This vulnerability may allow a remote attacker to intercept or modify encrypted communications by bypassing custom certificate validation. The issue occurs because the Agent dispatcher discards caller-supplied Transport Layer Security (TLS) verification functions during internal configuration copying, causing the client to silently ignore application-specific checks such as certificate or public-key pinning.

7.4 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-295 - Improper Certificate Validation

Affected products

Fixed 32 products, the same list as for CVE-2026-87018

Known not affected 65 products, the same list as for CVE-2026-87018

Threats

Impact Important

CVE-2026-109829

A flaw was found in undici. When an application configures redirect handling alongside a shared cache, responses received after cross-origin redirects are incorrectly stored under the initial request URL. A remote attacker who controls a redirect destination can exploit this vulnerability to poison the shared cache, serving malicious content to subsequent users requesting trusted URLs. Additionally, this behavior can result in information disclosure if private or user-specific responses are cached and delivered to unauthorized callers.

7.4 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-346 - Origin Validation Error

Affected products

Fixed 32 products, the same list as for CVE-2026-87018

Known not affected 65 products, the same list as for CVE-2026-87018

Threats

Impact Important

CVE-2026-109855

A flaw was found in undici. A malicious remote server can cause a Denial of Service (DoS) by returning an invalid handshake response when a client attempts to establish a WebSocket connection over HTTP/2. The client mishandles the failed connection setup and leaves the underlying network stream open without an error handler. When the remote server subsequently terminates the connection, an unhandled error is raised, causing the application process to crash.

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE-248 - Uncaught Exception

Affected products

Fixed 32 products, the same list as for CVE-2026-87018

Known not affected 65 products, the same list as for CVE-2026-87018

Threats

Impact Important

CVE-2026-109869

A flaw was found in undici. When an application sends a request to a malicious remote server, the server can return a response with excessive content encodings and immediately close the connection. Because the underlying response stream is left unhandled, this abrupt closure triggers an unhandled error that causes the application process to crash. Consequently, an attacker operating a remote server can cause a Denial of Service (DoS), terminating the application even if standard error handling is implemented.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-248 - Uncaught Exception

Affected products

Fixed 32 products, the same list as for CVE-2026-87018

Known not affected 65 products, the same list as for CVE-2026-87018

Threats

Impact Important

References

265 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:95081	self
https://access.redhat.com/security/cve/CVE-2026-56859	external
https://access.redhat.com/security/cve/CVE-2026-56860	external
https://access.redhat.com/security/cve/CVE-2026-56862	external
https://access.redhat.com/security/cve/CVE-2026-63209	external
https://access.redhat.com/security/cve/CVE-2026-75838	external
https://access.redhat.com/security/cve/CVE-2026-75899	external
https://access.redhat.com/security/cve/CVE-2026-75931	external
https://access.redhat.com/security/cve/CVE-2026-75975	external
https://access.redhat.com/security/cve/CVE-2026-76172	external
https://access.redhat.com/security/cve/CVE-2026-77301	external
https://access.redhat.com/security/cve/CVE-2026-82417	external
https://access.redhat.com/security/cve/CVE-2026-84292	external
https://access.redhat.com/security/cve/CVE-2026-102276	external
https://access.redhat.com/security/cve/CVE-2026-102278	external
https://access.redhat.com/security/cve/CVE-2026-109383	external
https://access.redhat.com/security/cve/CVE-2026-109829	external
https://access.redhat.com/security/cve/CVE-2026-109855	external
https://access.redhat.com/security/cve/CVE-2026-109869	external
https://access.redhat.com/security/cve/CVE-2026-19534	external
https://access.redhat.com/security/cve/CVE-2026-27145	external
https://access.redhat.com/security/cve/CVE-2026-33818	external
https://access.redhat.com/security/cve/CVE-2026-39821	external
https://access.redhat.com/security/cve/CVE-2026-39822	external
https://access.redhat.com/security/cve/CVE-2026-39834	external
https://access.redhat.com/security/cve/CVE-2026-42504	external
https://access.redhat.com/security/cve/CVE-2026-56853	external
https://access.redhat.com/security/cve/CVE-2026-84304	external
https://access.redhat.com/security/cve/CVE-2026-84375	external
https://access.redhat.com/security/cve/CVE-2026-84445	external
https://access.redhat.com/security/cve/CVE-2026-84961	external
https://access.redhat.com/security/cve/CVE-2026-85152	external
https://access.redhat.com/security/cve/CVE-2026-87018	external
https://access.redhat.com/security/cve/CVE-2026-56858	external
https://access.redhat.com/security/updates/classi…	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-19534	self
https://bugzilla.redhat.com/show_bug.cgi?id=2528759	external
https://www.cve.org/CVERecord?id=CVE-2026-19534	external
https://nvd.nist.gov/vuln/detail/CVE-2026-19534	external
https://cna.openjsf.org/security-advisories.html	external
https://github.com/nodejs/undici/security/advisor…	external
https://access.redhat.com/security/cve/CVE-2026-27145	self
https://bugzilla.redhat.com/show_bug.cgi?id=2484207	external
https://www.cve.org/CVERecord?id=CVE-2026-27145	external
https://nvd.nist.gov/vuln/detail/CVE-2026-27145	external
https://go.dev/cl/783621	external
https://go.dev/issue/79694	external
https://groups.google.com/g/golang-announce/c/tKs…	external
https://pkg.go.dev/vuln/GO-2026-5037	external
https://access.redhat.com/security/cve/CVE-2026-33818	self
https://bugzilla.redhat.com/show_bug.cgi?id=2515815	external
https://www.cve.org/CVERecord?id=CVE-2026-33818	external
https://nvd.nist.gov/vuln/detail/CVE-2026-33818	external
https://go.dev/cl/814980	external
https://go.dev/issue/80405	external
https://groups.google.com/g/golang-announce/c/94p…	external
https://pkg.go.dev/vuln/GO-2026-5972	external
https://access.redhat.com/security/cve/CVE-2026-39821	self
https://bugzilla.redhat.com/show_bug.cgi?id=2480756	external
https://www.cve.org/CVERecord?id=CVE-2026-39821	external
https://nvd.nist.gov/vuln/detail/CVE-2026-39821	external
https://go.dev/cl/767220	external
https://go.dev/issue/78760	external
https://groups.google.com/g/golang-announce/c/iI-…	external
https://pkg.go.dev/vuln/GO-2026-5026	external
https://access.redhat.com/security/cve/CVE-2026-39822	self
https://bugzilla.redhat.com/show_bug.cgi?id=2498152	external
https://www.cve.org/CVERecord?id=CVE-2026-39822	external
https://nvd.nist.gov/vuln/detail/CVE-2026-39822	external
https://go.dev/cl/797880	external
https://go.dev/issue/79005	external
https://groups.google.com/g/golang-announce/c/Orm…	external
https://pkg.go.dev/vuln/GO-2026-4970	external
https://access.redhat.com/security/cve/CVE-2026-39834	self
https://bugzilla.redhat.com/show_bug.cgi?id=2480676	external
https://www.cve.org/CVERecord?id=CVE-2026-39834	external
https://nvd.nist.gov/vuln/detail/CVE-2026-39834	external
https://go.dev/cl/781663	external
https://go.dev/issue/79567	external
https://groups.google.com/g/golang-announce/c/a08…	external
https://pkg.go.dev/vuln/GO-2026-5020	external
https://access.redhat.com/security/cve/CVE-2026-42504	self
https://bugzilla.redhat.com/show_bug.cgi?id=2484204	external
https://www.cve.org/CVERecord?id=CVE-2026-42504	external
https://nvd.nist.gov/vuln/detail/CVE-2026-42504	external
https://go.dev/cl/774481	external
https://go.dev/issue/79217	external
https://pkg.go.dev/vuln/GO-2026-5038	external
https://access.redhat.com/security/cve/CVE-2026-56853	self
https://bugzilla.redhat.com/show_bug.cgi?id=2515827	external
https://www.cve.org/CVERecord?id=CVE-2026-56853	external
https://nvd.nist.gov/vuln/detail/CVE-2026-56853	external
https://go.dev/cl/795540	external
https://go.dev/issue/80205	external
https://pkg.go.dev/vuln/GO-2026-6089	external
https://access.redhat.com/security/cve/CVE-2026-56858	self
https://bugzilla.redhat.com/show_bug.cgi?id=2515838	external
https://www.cve.org/CVERecord?id=CVE-2026-56858	external
https://nvd.nist.gov/vuln/detail/CVE-2026-56858	external
https://go.dev/cl/807100	external
https://go.dev/issue/80435	external
https://pkg.go.dev/vuln/GO-2026-6091	external
https://access.redhat.com/security/cve/CVE-2026-56859	self
https://bugzilla.redhat.com/show_bug.cgi?id=2515840	external
https://www.cve.org/CVERecord?id=CVE-2026-56859	external
https://nvd.nist.gov/vuln/detail/CVE-2026-56859	external
https://go.dev/cl/803320	external
https://go.dev/issue/80481	external
https://pkg.go.dev/vuln/GO-2026-6088	external
https://access.redhat.com/security/cve/CVE-2026-56860	self
https://bugzilla.redhat.com/show_bug.cgi?id=2515820	external
https://www.cve.org/CVERecord?id=CVE-2026-56860	external
https://nvd.nist.gov/vuln/detail/CVE-2026-56860	external
https://go.dev/cl/803681	external
https://go.dev/issue/80494	external
https://pkg.go.dev/vuln/GO-2026-6218	external
https://access.redhat.com/security/cve/CVE-2026-56862	self
https://bugzilla.redhat.com/show_bug.cgi?id=2515839	external
https://www.cve.org/CVERecord?id=CVE-2026-56862	external
https://nvd.nist.gov/vuln/detail/CVE-2026-56862	external
https://go.dev/cl/804261	external
https://go.dev/issue/80528	external
https://pkg.go.dev/vuln/GO-2026-6090	external
https://access.redhat.com/security/cve/CVE-2026-63209	self
https://bugzilla.redhat.com/show_bug.cgi?id=2543236	external
https://www.cve.org/CVERecord?id=CVE-2026-63209	external
https://nvd.nist.gov/vuln/detail/CVE-2026-63209	external
https://github.com/klauspost/compress/commit/5392…	external
https://github.com/klauspost/compress/releases/ta…	external
https://github.com/klauspost/compress/security/ad…	external
https://access.redhat.com/security/cve/CVE-2026-75838	self
https://bugzilla.redhat.com/show_bug.cgi?id=2517772	external
https://www.cve.org/CVERecord?id=CVE-2026-75838	external
https://nvd.nist.gov/vuln/detail/CVE-2026-75838	external
https://github.com/cure53/DOMPurify/security/advi…	external
https://www.vulncheck.com/advisories/dompurify-be…	external
https://access.redhat.com/security/cve/CVE-2026-75899	self
https://bugzilla.redhat.com/show_bug.cgi?id=2521778	external
https://www.cve.org/CVERecord?id=CVE-2026-75899	external
https://nvd.nist.gov/vuln/detail/CVE-2026-75899	external
https://github.com/fastify/fast-uri/security/advi…	external
https://access.redhat.com/security/cve/CVE-2026-75931	self
https://bugzilla.redhat.com/show_bug.cgi?id=2521777	external
https://www.cve.org/CVERecord?id=CVE-2026-75931	external
https://nvd.nist.gov/vuln/detail/CVE-2026-75931	external
https://github.com/fastify/fast-uri/security/advi…	external
https://access.redhat.com/security/cve/CVE-2026-75975	self
https://bugzilla.redhat.com/show_bug.cgi?id=2521779	external
https://www.cve.org/CVERecord?id=CVE-2026-75975	external
https://nvd.nist.gov/vuln/detail/CVE-2026-75975	external
https://github.com/fastify/fast-uri/security/advi…	external
https://access.redhat.com/security/cve/CVE-2026-76172	self
https://bugzilla.redhat.com/show_bug.cgi?id=2521798	external
https://www.cve.org/CVERecord?id=CVE-2026-76172	external
https://nvd.nist.gov/vuln/detail/CVE-2026-76172	external
https://github.com/fastify/fast-uri/security/advi…	external
https://access.redhat.com/security/cve/CVE-2026-77301	self
https://bugzilla.redhat.com/show_bug.cgi?id=2539017	external
https://www.cve.org/CVERecord?id=CVE-2026-77301	external
https://nvd.nist.gov/vuln/detail/CVE-2026-77301	external
https://github.com/cthackers/adm-zip/commit/49160…	external
https://github.com/cthackers/adm-zip/releases/tag…	external
https://github.com/cthackers/adm-zip/security/adv…	external
https://access.redhat.com/security/cve/CVE-2026-82417	self
https://bugzilla.redhat.com/show_bug.cgi?id=2525936	external
https://www.cve.org/CVERecord?id=CVE-2026-82417	external
https://nvd.nist.gov/vuln/detail/CVE-2026-82417	external
https://github.com/ljharb/qs/commit/e83d321ffafb3…	external
https://github.com/ljharb/qs/security/advisories/…	external
https://access.redhat.com/security/cve/CVE-2026-84292	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527747	external
https://www.cve.org/CVERecord?id=CVE-2026-84292	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84292	external
https://github.com/fastify/fast-uri/security/advi…	external
https://access.redhat.com/security/cve/CVE-2026-84304	self
https://bugzilla.redhat.com/show_bug.cgi?id=2526955	external
https://www.cve.org/CVERecord?id=CVE-2026-84304	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84304	external
https://github.com/grpc/grpc-go/commit/7354d9c8de…	external
https://github.com/grpc/grpc-go/commit/8cfeca0e1e…	external
https://github.com/grpc/grpc-go/pull/9331	external
https://github.com/grpc/grpc-go/pull/9333	external
https://github.com/grpc/grpc-go/releases/tag/v1.83.1	external
https://github.com/grpc/grpc-go/security/advisori…	external
https://access.redhat.com/security/cve/CVE-2026-84375	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527118	external
https://www.cve.org/CVERecord?id=CVE-2026-84375	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84375	external
https://github.com/nodeca/js-yaml/commit/3485bc06…	external
https://github.com/nodeca/js-yaml/commit/6a8e05f9…	external
https://github.com/nodeca/js-yaml/commit/d90b6612…	external
https://github.com/nodeca/js-yaml/pull/797	external
https://github.com/nodeca/js-yaml/releases/tag/3.15.2	external
https://github.com/nodeca/js-yaml/releases/tag/4.3.2	external
https://github.com/nodeca/js-yaml/security/adviso…	external
https://access.redhat.com/security/cve/CVE-2026-84445	self
https://bugzilla.redhat.com/show_bug.cgi?id=2533175	external
https://www.cve.org/CVERecord?id=CVE-2026-84445	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84445	external
https://github.com/grpc/grpc-go/commit/3822494d8e…	external
https://github.com/grpc/grpc-go/commit/8668b69c16…	external
https://github.com/grpc/grpc-go/commit/93e31b4854…	external
https://github.com/grpc/grpc-go/issues/9354	external
https://github.com/grpc/grpc-go/pull/9365	external
https://github.com/grpc/grpc-go/pull/9366	external
https://github.com/grpc/grpc-go/pull/9367	external
https://github.com/grpc/grpc-go/releases/tag/v1.82.2	external
https://github.com/grpc/grpc-go/releases/tag/v1.83.2	external
https://github.com/grpc/grpc-go/security/advisori…	external
https://access.redhat.com/security/cve/CVE-2026-84961	self
https://bugzilla.redhat.com/show_bug.cgi?id=2528735	external
https://www.cve.org/CVERecord?id=CVE-2026-84961	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84961	external
https://github.com/nodejs/undici/security/advisor…	external
https://access.redhat.com/security/cve/CVE-2026-85152	self
https://bugzilla.redhat.com/show_bug.cgi?id=2528717	external
https://www.cve.org/CVERecord?id=CVE-2026-85152	external
https://nvd.nist.gov/vuln/detail/CVE-2026-85152	external
https://github.com/nodejs/undici/security/advisor…	external
https://access.redhat.com/security/cve/CVE-2026-87018	self
https://bugzilla.redhat.com/show_bug.cgi?id=2553677	external
https://www.cve.org/CVERecord?id=CVE-2026-87018	external
https://nvd.nist.gov/vuln/detail/CVE-2026-87018	external
https://github.com/nodejs/undici/security/advisor…	external
https://access.redhat.com/security/cve/CVE-2026-102276	self
https://bugzilla.redhat.com/show_bug.cgi?id=2542707	external
https://www.cve.org/CVERecord?id=CVE-2026-102276	external
https://nvd.nist.gov/vuln/detail/CVE-2026-102276	external
https://github.com/juliangruber/brace-expansion/c…	external
https://github.com/juliangruber/brace-expansion/c…	external
https://github.com/juliangruber/brace-expansion/c…	external
https://github.com/juliangruber/brace-expansion/c…	external
https://github.com/juliangruber/brace-expansion/s…	external
https://access.redhat.com/security/cve/CVE-2026-102278	self
https://bugzilla.redhat.com/show_bug.cgi?id=2542700	external
https://www.cve.org/CVERecord?id=CVE-2026-102278	external
https://nvd.nist.gov/vuln/detail/CVE-2026-102278	external
https://github.com/juliangruber/brace-expansion/c…	external
https://github.com/juliangruber/brace-expansion/c…	external
https://github.com/juliangruber/brace-expansion/c…	external
https://github.com/juliangruber/brace-expansion/s…	external
https://access.redhat.com/security/cve/CVE-2026-109383	self
https://bugzilla.redhat.com/show_bug.cgi?id=2553678	external
https://www.cve.org/CVERecord?id=CVE-2026-109383	external
https://nvd.nist.gov/vuln/detail/CVE-2026-109383	external
https://github.com/nodejs/undici/commit/f75eac00ac17	external
https://github.com/nodejs/undici/security/advisor…	external
https://access.redhat.com/security/cve/CVE-2026-109829	self
https://bugzilla.redhat.com/show_bug.cgi?id=2553679	external
https://www.cve.org/CVERecord?id=CVE-2026-109829	external
https://nvd.nist.gov/vuln/detail/CVE-2026-109829	external
https://github.com/nodejs/undici/commit/26c2bfb3def0	external
https://github.com/nodejs/undici/security/advisor…	external
https://access.redhat.com/security/cve/CVE-2026-109855	self
https://bugzilla.redhat.com/show_bug.cgi?id=2553103	external
https://www.cve.org/CVERecord?id=CVE-2026-109855	external
https://nvd.nist.gov/vuln/detail/CVE-2026-109855	external
https://github.com/nodejs/undici/security/advisor…	external
https://access.redhat.com/security/cve/CVE-2026-109869	self
https://bugzilla.redhat.com/show_bug.cgi?id=2553656	external
https://www.cve.org/CVERecord?id=CVE-2026-109869	external
https://nvd.nist.gov/vuln/detail/CVE-2026-109869	external
https://github.com/nodejs/undici/commit/b5084c7dc239	external
https://github.com/nodejs/undici/security/advisor…	external

JSON

To clipboard

Loading 2.7 MB of JSON…

CVE-2026-102276 (GCVE-0-2026-102276)

Vulnerability from cvelistv5 – Published: 2026-09-28 20:50 – Updated: 2026-09-29 13:38

Title

brace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustion

Summary

The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.19, 2.1.5, 3.0.7, and 5.0.10, crafted brace patterns can exhaust the native stack in parseCommaParts because parseCommaParts recursively processes the remainder once per brace group and uses push.apply to pass every element of a very large comma-part array as a function argument. Patterns containing many comma-separated brace groups trigger the recursive path, while the large array triggers the argument-array path without deep recursion. These paths cause recursive and argument-array native stack exhaustion before max or maxLength can limit output, potentially terminating the Node.js process in a process-terminating denial of service. This issue is fixed in versions 1.1.19, 2.1.5, 3.0.7, and 5.0.10.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-29 13:37 UTC

CWE

CWE-400 - Uncontrolled Resource Consumption
CWE-674 - Uncontrolled Recursion

Assigner

GitHub_M CNA under the mitre root

CNA scorecard C 72/100 over 8094 records in the last 180 days details

References

5 references

URL	Tags
https://github.com/juliangruber/brace-expansion/s…	x_refsource_CONFIRM
https://github.com/juliangruber/brace-expansion/c…	x_refsource_MISC
https://github.com/juliangruber/brace-expansion/c…	x_refsource_MISC
https://github.com/juliangruber/brace-expansion/c…	x_refsource_MISC
https://github.com/juliangruber/brace-expansion/c…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
juliangruber	brace-expansion	Affected: >= 4.0.0, < 5.0.10 Affected: >= 3.0.0, < 3.0.7 Affected: >= 2.0.0, < 2.1.5 Affected: < 1.1.19

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-102276",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-29T13:37:06.086529Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-29T13:38:29.919Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "brace-expansion",
          "vendor": "juliangruber",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 4.0.0, \u003c 5.0.10"
            },
            {
              "status": "affected",
              "version": "\u003e= 3.0.0, \u003c 3.0.7"
            },
            {
              "status": "affected",
              "version": "\u003e= 2.0.0, \u003c 2.1.5"
            },
            {
              "status": "affected",
              "version": "\u003c 1.1.19"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.19, 2.1.5, 3.0.7, and 5.0.10, crafted brace patterns can exhaust the native stack in parseCommaParts because parseCommaParts recursively processes the remainder once per brace group and uses push.apply to pass every element of a very large comma-part array as a function argument. Patterns containing many comma-separated brace groups trigger the recursive path, while the large array triggers the argument-array path without deep recursion. These paths cause recursive and argument-array native stack exhaustion before max or maxLength can limit output, potentially terminating the Node.js process in a process-terminating denial of service. This issue is fixed in versions 1.1.19, 2.1.5, 3.0.7, and 5.0.10."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-400",
              "description": "CWE-400: Uncontrolled Resource Consumption",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-674",
              "description": "CWE-674: Uncontrolled Recursion",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-28T20:50:59.984Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-6j4f-fj2g-mc7p",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-6j4f-fj2g-mc7p"
        },
        {
          "name": "https://github.com/juliangruber/brace-expansion/commit/0bcbfc0a5928c3073d48f42999d1ce4fc1c42fbc",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/juliangruber/brace-expansion/commit/0bcbfc0a5928c3073d48f42999d1ce4fc1c42fbc"
        },
        {
          "name": "https://github.com/juliangruber/brace-expansion/commit/316359e6019c39b3254c8ba8e25dc586a480652c",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/juliangruber/brace-expansion/commit/316359e6019c39b3254c8ba8e25dc586a480652c"
        },
        {
          "name": "https://github.com/juliangruber/brace-expansion/commit/5171e681c0922b7ae8bfaf9a331e309107be6edc",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/juliangruber/brace-expansion/commit/5171e681c0922b7ae8bfaf9a331e309107be6edc"
        },
        {
          "name": "https://github.com/juliangruber/brace-expansion/commit/6735c94873ca570bcdd6a0690033bdd3126379d3",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/juliangruber/brace-expansion/commit/6735c94873ca570bcdd6a0690033bdd3126379d3"
        }
      ],
      "source": {
        "advisory": "GHSA-6j4f-fj2g-mc7p",
        "discovery": "UNKNOWN"
      },
      "title": "brace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustion"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-102276",
    "datePublished": "2026-09-28T20:50:59.984Z",
    "dateReserved": "2026-09-28T20:11:16.658Z",
    "dateUpdated": "2026-09-29T13:38:29.919Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-102278 (GCVE-0-2026-102278)

Vulnerability from cvelistv5 – Published: 2026-09-28 20:57 – Updated: 2026-10-01 15:02

Title

brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustion

Summary

The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.20, 2.1.6, 3.0.8, and 5.0.11, deeply nested brace groups cause expand_() to recurse once per nesting level at comma-member and single-set expansion sites, exhausting the native stack before output limits can apply and potentially terminating the Node.js process. expand_ performs uncontrolled recursion for nested brace alternatives and single-part sets. deeply nested brace groups supplied as an untrusted pattern. expand_ is affected. expand is affected. Comma members is affected. Single set is affected. native stack exhaustion during nested sub-expansion. process-terminating denial of service. This issue is fixed in versions 1.1.20, 2.1.6, 3.0.8, and 5.0.11.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-01 15:02 UTC

CWE

CWE-400 - Uncontrolled Resource Consumption
CWE-674 - Uncontrolled Recursion

Assigner

GitHub_M CNA under the mitre root

CNA scorecard C 72/100 over 8094 records in the last 180 days details

References

4 references

URL	Tags
https://github.com/juliangruber/brace-expansion/s…	x_refsource_CONFIRM
https://github.com/juliangruber/brace-expansion/c…	x_refsource_MISC
https://github.com/juliangruber/brace-expansion/c…	x_refsource_MISC
https://github.com/juliangruber/brace-expansion/c…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
juliangruber	brace-expansion	Affected: >= 4.0.0, < 5.0.11 Affected: >= 3.0.0, < 3.0.8 Affected: >= 2.0.0, < 2.1.6 Affected: < 1.1.20

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-102278",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-01T15:02:35.975978Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-01T15:02:44.798Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "brace-expansion",
          "vendor": "juliangruber",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 4.0.0, \u003c 5.0.11"
            },
            {
              "status": "affected",
              "version": "\u003e= 3.0.0, \u003c 3.0.8"
            },
            {
              "status": "affected",
              "version": "\u003e= 2.0.0, \u003c 2.1.6"
            },
            {
              "status": "affected",
              "version": "\u003c 1.1.20"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.20, 2.1.6, 3.0.8, and 5.0.11, deeply nested brace groups cause expand_() to recurse once per nesting level at comma-member and single-set expansion sites, exhausting the native stack before output limits can apply and potentially terminating the Node.js process. expand_ performs uncontrolled recursion for nested brace alternatives and single-part sets. deeply nested brace groups supplied as an untrusted pattern. expand_ is affected. expand is affected. Comma members is affected. Single set is affected. native stack exhaustion during nested sub-expansion. process-terminating denial of service. This issue is fixed in versions 1.1.20, 2.1.6, 3.0.8, and 5.0.11."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-400",
              "description": "CWE-400: Uncontrolled Resource Consumption",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-674",
              "description": "CWE-674: Uncontrolled Recursion",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-28T20:57:09.850Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-qhr7-859c-m2p7",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-qhr7-859c-m2p7"
        },
        {
          "name": "https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b"
        },
        {
          "name": "https://github.com/juliangruber/brace-expansion/commit/935d78f32f335b2ff76578e5c5e877d31ae9888c",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/juliangruber/brace-expansion/commit/935d78f32f335b2ff76578e5c5e877d31ae9888c"
        },
        {
          "name": "https://github.com/juliangruber/brace-expansion/commit/de84f144e9816f30e25fc8179e2e1249ab6df0db",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/juliangruber/brace-expansion/commit/de84f144e9816f30e25fc8179e2e1249ab6df0db"
        }
      ],
      "source": {
        "advisory": "GHSA-qhr7-859c-m2p7",
        "discovery": "UNKNOWN"
      },
      "title": "brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustion"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-102278",
    "datePublished": "2026-09-28T20:57:09.850Z",
    "dateReserved": "2026-09-28T20:11:16.659Z",
    "dateUpdated": "2026-10-01T15:02:44.798Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-109383 (GCVE-0-2026-109383)

Vulnerability from cvelistv5 – Published: 2026-10-15 18:34 – Updated: 2026-10-16 20:03

Title

undici vulnerable to TLS certificate validation bypass via dropped tls options in Agent

Summary

undici is an HTTP client library for Node.js. In versions 4.0.0 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.0 through 8.12.1, its Agent dispatcher passes its constructor options through a JSON-based deep clone before forwarding them to each per-origin pool, and because JSON cannot represent functions, a caller-supplied tls option containing a checkServerIdentity callback is silently dropped before it reaches the TLS layer. As a result, a TLS peer whose certificate a custom checkServerIdentity was written to reject, but which passes Node's default hostname and chain checks, is silently accepted. Because Agent is the default dispatcher behind request, fetch, and setGlobalDispatcher, this affects the path most applications use, and EnvHttpProxyAgent is affected on its direct and no-proxy routes as well, while only applications that pass a function-valued tls option such as a custom checkServerIdentity for certificate or public-key pinning are at risk. The issue is fixed in undici 6.29.1, 7.30.1, and 8.12.2, which preserve the tls option outside the JSON clone so custom verification callbacks are forwarded unchanged, and users should upgrade to one of those versions or later. As a workaround, pass the TLS options through connect instead of tls, or for proxied destinations use requestTls and proxyTls.

Severity

7.4 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-16 20:03 UTC

CWE

CWE-295 - Improper Certificate Validation

Assigner

openjs CNA under the redhat root

CNA scorecard C 65/100 over 131 records in the last 180 days details

References

2 references

URL	Tags
https://github.com/nodejs/undici/security/advisor…
https://cna.openjsf.org/security-advisories.html

Impacted products

1 product

Vendor	Product	Version
undici	undici	Affected: 4.0.0 , < 6.29.1 (semver) Unaffected: 6.29.1 (semver) Affected: 7.0.0 , < 7.30.1 (semver) Unaffected: 7.30.1 (semver) Affected: 8.0.0 , < 8.12.2 (semver) Unaffected: 8.12.2 (semver)

Credits

euriconicacio mcollina UlisesGascon BlueN0r ksanjeev284

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-109383",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-16T20:03:13.245340Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-16T20:03:30.839Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "packageURL": "pkg:npm/undici",
          "product": "undici",
          "vendor": "undici",
          "versions": [
            {
              "lessThan": "6.29.1",
              "status": "affected",
              "version": "4.0.0",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "6.29.1",
              "versionType": "semver"
            },
            {
              "lessThan": "7.30.1",
              "status": "affected",
              "version": "7.0.0",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "7.30.1",
              "versionType": "semver"
            },
            {
              "lessThan": "8.12.2",
              "status": "affected",
              "version": "8.0.0",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "8.12.2",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "euriconicacio"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "mcollina"
        },
        {
          "lang": "en",
          "type": "remediation reviewer",
          "value": "UlisesGascon"
        },
        {
          "lang": "en",
          "type": "reporter",
          "value": "BlueN0r"
        },
        {
          "lang": "en",
          "type": "reporter",
          "value": "ksanjeev284"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "undici is an HTTP client library for Node.js. In versions 4.0.0 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.0 through 8.12.1, its Agent dispatcher passes its constructor options through a JSON-based deep clone before forwarding them to each per-origin pool, and because JSON cannot represent functions, a caller-supplied tls option containing a checkServerIdentity callback is silently dropped before it reaches the TLS layer. As a result, a TLS peer whose certificate a custom checkServerIdentity was written to reject, but which passes Node\u0027s default hostname and chain checks, is silently accepted. Because Agent is the default dispatcher behind request, fetch, and setGlobalDispatcher, this affects the path most applications use, and EnvHttpProxyAgent is affected on its direct and no-proxy routes as well, while only applications that pass a function-valued tls option such as a custom checkServerIdentity for certificate or public-key pinning are at risk. The issue is fixed in undici 6.29.1, 7.30.1, and 8.12.2, which preserve the tls option outside the JSON clone so custom verification callbacks are forwarded unchanged, and users should upgrade to one of those versions or later. As a workaround, pass the TLS options through connect instead of tls, or for proxied destinations use requestTls and proxyTls."
            }
          ],
          "value": "undici is an HTTP client library for Node.js. In versions 4.0.0 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.0 through 8.12.1, its Agent dispatcher passes its constructor options through a JSON-based deep clone before forwarding them to each per-origin pool, and because JSON cannot represent functions, a caller-supplied tls option containing a checkServerIdentity callback is silently dropped before it reaches the TLS layer. As a result, a TLS peer whose certificate a custom checkServerIdentity was written to reject, but which passes Node\u0027s default hostname and chain checks, is silently accepted. Because Agent is the default dispatcher behind request, fetch, and setGlobalDispatcher, this affects the path most applications use, and EnvHttpProxyAgent is affected on its direct and no-proxy routes as well, while only applications that pass a function-valued tls option such as a custom checkServerIdentity for certificate or public-key pinning are at risk. The issue is fixed in undici 6.29.1, 7.30.1, and 8.12.2, which preserve the tls option outside the JSON clone so custom verification callbacks are forwarded unchanged, and users should upgrade to one of those versions or later. As a workaround, pass the TLS options through connect instead of tls, or for proxied destinations use requestTls and proxyTls."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-295",
              "description": "CWE-295: Improper Certificate Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-15T18:34:01.468Z",
        "orgId": "ce714d77-add3-4f53-aff5-83d477b104bb",
        "shortName": "openjs"
      },
      "references": [
        {
          "url": "https://github.com/nodejs/undici/security/advisories/GHSA-2m5v-pch6-74hx"
        },
        {
          "url": "https://cna.openjsf.org/security-advisories.html"
        }
      ],
      "title": "undici vulnerable to TLS certificate validation bypass via dropped tls options in Agent",
      "x_generator": {
        "engine": "cve-kit 1.0.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ce714d77-add3-4f53-aff5-83d477b104bb",
    "assignerShortName": "openjs",
    "cveId": "CVE-2026-109383",
    "datePublished": "2026-10-15T18:34:01.468Z",
    "dateReserved": "2026-10-12T14:29:57.987Z",
    "dateUpdated": "2026-10-16T20:03:30.839Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-109829 (GCVE-0-2026-109829)

Vulnerability from cvelistv5 – Published: 2026-10-15 18:28 – Updated: 2026-10-16 20:04

Title

undici vulnerable to cache poisoning and cross-user disclosure via cross-origin redirects

Summary

undici is an HTTP client library for Node.js. In versions 7.0.0 through 7.30.0 and 8.0.0 through 8.12.1, when an originless Agent composes the redirect and cache interceptors in that order with a shared cache store, the cache builds its key from the original request URL before the redirect handler changes the origin, so a response produced after a cross-origin redirect is stored under the original key. An attacker who controls the target of a redirect from a trusted URL can have their response cached under that trusted URL and served to later callers, allowing persistent cache poisoning, and the same key confusion lets a private, non-stored redirect response to a user-specific resource be stored under the original URL and served to a later unauthenticated caller, disclosing private data. Applications are affected only when an originless Agent, a shared cache store, and the redirect-then-cache composition are all used. The issue is fixed in undici 7.30.1 and 8.12.2, which verify the producing origin still matches the cache key and preserve each redirect hop's cache-control policy before storing, and users should upgrade to one of those versions or later. As a workaround, compose the cache interceptor before the redirect interceptor, use per-origin dispatchers and cache stores, or disable shared caching on redirect-capable requests.

Severity

7.4 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-16 20:03 UTC

CWE

CWE-346 - Origin Validation Error
CWE-524 - Use of Cache Containing Sensitive Information

Assigner

openjs CNA under the redhat root

CNA scorecard C 65/100 over 131 records in the last 180 days details

References

2 references

URL	Tags
https://github.com/nodejs/undici/security/advisor…
https://cna.openjsf.org/security-advisories.html

Impacted products

1 product

Vendor	Product	Version
undici	undici	Affected: 7.0.0 , < 7.30.1 (semver) Unaffected: 7.30.1 (semver) Affected: 8.0.0 , < 8.12.2 (semver) Unaffected: 8.12.2 (semver)

Credits

Kushalkhemka mayank-jangid-moon opensec-intelligence bengsky13 mcollina UlisesGascon skigeek16

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-109829",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-16T20:03:57.700768Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-16T20:04:09.504Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "packageURL": "pkg:npm/undici",
          "product": "undici",
          "vendor": "undici",
          "versions": [
            {
              "lessThan": "7.30.1",
              "status": "affected",
              "version": "7.0.0",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "7.30.1",
              "versionType": "semver"
            },
            {
              "lessThan": "8.12.2",
              "status": "affected",
              "version": "8.0.0",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "8.12.2",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Kushalkhemka"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "mayank-jangid-moon"
        },
        {
          "lang": "en",
          "type": "tool",
          "value": "opensec-intelligence"
        },
        {
          "lang": "en",
          "type": "reporter",
          "value": "bengsky13"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "mcollina"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "UlisesGascon"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "skigeek16"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "undici is an HTTP client library for Node.js. In versions 7.0.0 through 7.30.0 and 8.0.0 through 8.12.1, when an originless Agent composes the redirect and cache interceptors in that order with a shared cache store, the cache builds its key from the original request URL before the redirect handler changes the origin, so a response produced after a cross-origin redirect is stored under the original key. An attacker who controls the target of a redirect from a trusted URL can have their response cached under that trusted URL and served to later callers, allowing persistent cache poisoning, and the same key confusion lets a private, non-stored redirect response to a user-specific resource be stored under the original URL and served to a later unauthenticated caller, disclosing private data. Applications are affected only when an originless Agent, a shared cache store, and the redirect-then-cache composition are all used. The issue is fixed in undici 7.30.1 and 8.12.2, which verify the producing origin still matches the cache key and preserve each redirect hop\u0027s cache-control policy before storing, and users should upgrade to one of those versions or later. As a workaround, compose the cache interceptor before the redirect interceptor, use per-origin dispatchers and cache stores, or disable shared caching on redirect-capable requests."
            }
          ],
          "value": "undici is an HTTP client library for Node.js. In versions 7.0.0 through 7.30.0 and 8.0.0 through 8.12.1, when an originless Agent composes the redirect and cache interceptors in that order with a shared cache store, the cache builds its key from the original request URL before the redirect handler changes the origin, so a response produced after a cross-origin redirect is stored under the original key. An attacker who controls the target of a redirect from a trusted URL can have their response cached under that trusted URL and served to later callers, allowing persistent cache poisoning, and the same key confusion lets a private, non-stored redirect response to a user-specific resource be stored under the original URL and served to a later unauthenticated caller, disclosing private data. Applications are affected only when an originless Agent, a shared cache store, and the redirect-then-cache composition are all used. The issue is fixed in undici 7.30.1 and 8.12.2, which verify the producing origin still matches the cache key and preserve each redirect hop\u0027s cache-control policy before storing, and users should upgrade to one of those versions or later. As a workaround, compose the cache interceptor before the redirect interceptor, use per-origin dispatchers and cache stores, or disable shared caching on redirect-capable requests."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-346",
              "description": "CWE-346: Origin Validation Error",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-524",
              "description": "CWE-524: Use of Cache Containing Sensitive Information",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-15T18:28:04.954Z",
        "orgId": "ce714d77-add3-4f53-aff5-83d477b104bb",
        "shortName": "openjs"
      },
      "references": [
        {
          "url": "https://github.com/nodejs/undici/security/advisories/GHSA-4w7w-5xrc-9h26"
        },
        {
          "url": "https://cna.openjsf.org/security-advisories.html"
        }
      ],
      "title": "undici vulnerable to cache poisoning and cross-user disclosure via cross-origin redirects",
      "x_generator": {
        "engine": "cve-kit 1.0.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ce714d77-add3-4f53-aff5-83d477b104bb",
    "assignerShortName": "openjs",
    "cveId": "CVE-2026-109829",
    "datePublished": "2026-10-15T18:28:04.954Z",
    "dateReserved": "2026-10-13T05:47:05.596Z",
    "dateUpdated": "2026-10-16T20:04:09.504Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-109855 (GCVE-0-2026-109855)

Vulnerability from cvelistv5 – Published: 2026-10-15 08:12 – Updated: 2026-10-15 14:22

Title

undici WebSocket client vulnerable to Denial of Service via failed HTTP/2 handshake

Summary

undici is an HTTP client library for Node.js. In versions 8.11.0 and 8.11.1, its experimental WebSocket client, which is enabled by default when HTTP/2 is allowed, mishandles a failed WebSocket handshake over HTTP/2: the request is already marked completed, so the abort becomes a no-op and the underlying HTTP/2 stream is left open with no error listener. When a malicious server then destroys the connection, the orphaned stream emits an unhandled error and the Node.js process exits. A remote, unauthenticated server can therefore crash any client that opens a WebSocket to it over HTTP/2, resulting in a denial of service. The issue is fixed in undici 8.11.2, and users should upgrade to 8.11.2 or later. As a workaround, set allowH2 to false to disable HTTP/2 for WebSocket connections, or avoid opening WebSocket connections to untrusted servers.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-15 14:21 UTC

CWE

CWE-248 - Uncaught Exception
CWE-754 - Improper Check for Unusual or Exceptional Conditions

Assigner

openjs CNA under the redhat root

CNA scorecard C 65/100 over 131 records in the last 180 days details

References

2 references

URL	Tags
https://github.com/nodejs/undici/security/advisor…
https://cna.openjsf.org/security-advisories.html

Impacted products

1 product

Vendor	Product	Version
undici	undici	Affected: 8.11.0 , < 8.11.2 (semver) Unaffected: 8.11.2 (semver)

Credits

kjsik11 mcollina jasnell metcoder95 UlisesGascon ronag

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-109855",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-15T14:21:59.498708Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-15T14:22:28.644Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "packageURL": "pkg:npm/undici",
          "product": "undici",
          "vendor": "undici",
          "versions": [
            {
              "lessThan": "8.11.2",
              "status": "affected",
              "version": "8.11.0",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "8.11.2",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "kjsik11"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "mcollina"
        },
        {
          "lang": "en",
          "type": "remediation reviewer",
          "value": "jasnell"
        },
        {
          "lang": "en",
          "type": "remediation reviewer",
          "value": "metcoder95"
        },
        {
          "lang": "en",
          "type": "remediation verifier",
          "value": "UlisesGascon"
        },
        {
          "lang": "en",
          "type": "remediation reviewer",
          "value": "ronag"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "undici is an HTTP client library for Node.js. In versions 8.11.0 and 8.11.1, its experimental WebSocket client, which is enabled by default when HTTP/2 is allowed, mishandles a failed WebSocket handshake over HTTP/2: the request is already marked completed, so the abort becomes a no-op and the underlying HTTP/2 stream is left open with no error listener. When a malicious server then destroys the connection, the orphaned stream emits an unhandled error and the Node.js process exits. A remote, unauthenticated server can therefore crash any client that opens a WebSocket to it over HTTP/2, resulting in a denial of service. The issue is fixed in undici 8.11.2, and users should upgrade to 8.11.2 or later. As a workaround, set allowH2 to false to disable HTTP/2 for WebSocket connections, or avoid opening WebSocket connections to untrusted servers."
            }
          ],
          "value": "undici is an HTTP client library for Node.js. In versions 8.11.0 and 8.11.1, its experimental WebSocket client, which is enabled by default when HTTP/2 is allowed, mishandles a failed WebSocket handshake over HTTP/2: the request is already marked completed, so the abort becomes a no-op and the underlying HTTP/2 stream is left open with no error listener. When a malicious server then destroys the connection, the orphaned stream emits an unhandled error and the Node.js process exits. A remote, unauthenticated server can therefore crash any client that opens a WebSocket to it over HTTP/2, resulting in a denial of service. The issue is fixed in undici 8.11.2, and users should upgrade to 8.11.2 or later. As a workaround, set allowH2 to false to disable HTTP/2 for WebSocket connections, or avoid opening WebSocket connections to untrusted servers."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-248",
              "description": "CWE-248: Uncaught Exception",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-754",
              "description": "CWE-754: Improper Check for Unusual or Exceptional Conditions",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-15T08:12:51.245Z",
        "orgId": "ce714d77-add3-4f53-aff5-83d477b104bb",
        "shortName": "openjs"
      },
      "references": [
        {
          "url": "https://github.com/nodejs/undici/security/advisories/GHSA-qq8j-7v2v-3rwp"
        },
        {
          "url": "https://cna.openjsf.org/security-advisories.html"
        }
      ],
      "title": "undici WebSocket client vulnerable to Denial of Service via failed HTTP/2 handshake",
      "x_generator": {
        "engine": "cve-kit 1.0.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ce714d77-add3-4f53-aff5-83d477b104bb",
    "assignerShortName": "openjs",
    "cveId": "CVE-2026-109855",
    "datePublished": "2026-10-15T08:12:51.245Z",
    "dateReserved": "2026-10-13T07:28:59.621Z",
    "dateUpdated": "2026-10-15T14:22:28.644Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-109869 (GCVE-0-2026-109869)

Vulnerability from cvelistv5 – Published: 2026-10-15 18:08 – Updated: 2026-10-16 20:06

Title

undici vulnerable to Denial of Service via unhandled error on excessive content-encodings

Summary

undici is an HTTP client library for Node.js. In versions 6.23.0 through 6.29.0, 7.18.0 through 7.30.0, and 8.0.0 through 8.12.1, its fetch() implementation crashes the Node.js process when a malicious server returns a response with more than five content codings and closes the connection before sending the body. undici rejects such responses because of a content-encoding limit, but it created the internal response stream before that check and returned without attaching an error listener or aborting the request, so the early close surfaces a content-length mismatch on the orphaned stream, which Node.js treats as an unhandled error and terminates the process. A remote, unauthenticated server can trigger this with a single response, even when the application correctly catches the fetch() rejection, resulting in a denial of service. The issue is fixed in undici 6.29.1, 7.30.1, and 8.12.2, and users should upgrade to one of those versions or later. There is no workaround.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-16 20:05 UTC

CWE

CWE-248 - Uncaught Exception
CWE-459 - Incomplete Cleanup

Assigner

openjs CNA under the redhat root

CNA scorecard C 65/100 over 131 records in the last 180 days details

References

2 references

URL	Tags
https://github.com/nodejs/undici/security/advisor…
https://cna.openjsf.org/security-advisories.html

Impacted products

1 product

Vendor	Product	Version
undici	undici	Affected: 6.23.0 , < 6.29.1 (semver) Unaffected: 6.29.1 (semver) Affected: 7.18.0 , < 7.30.1 (semver) Unaffected: 7.30.1 (semver) Affected: 8.0.0 , < 8.12.2 (semver) Unaffected: 8.12.2 (semver)

Credits

hanityx mcollina UlisesGascon

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-109869",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-16T20:05:44.033842Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-16T20:06:00.782Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "packageURL": "pkg:npm/undici",
          "product": "undici",
          "vendor": "undici",
          "versions": [
            {
              "lessThan": "6.29.1",
              "status": "affected",
              "version": "6.23.0",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "6.29.1",
              "versionType": "semver"
            },
            {
              "lessThan": "7.30.1",
              "status": "affected",
              "version": "7.18.0",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "7.30.1",
              "versionType": "semver"
            },
            {
              "lessThan": "8.12.2",
              "status": "affected",
              "version": "8.0.0",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "8.12.2",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "hanityx"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "mcollina"
        },
        {
          "lang": "en",
          "type": "remediation reviewer",
          "value": "UlisesGascon"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "undici is an HTTP client library for Node.js. In versions 6.23.0 through 6.29.0, 7.18.0 through 7.30.0, and 8.0.0 through 8.12.1, its fetch() implementation crashes the Node.js process when a malicious server returns a response with more than five content codings and closes the connection before sending the body. undici rejects such responses because of a content-encoding limit, but it created the internal response stream before that check and returned without attaching an error listener or aborting the request, so the early close surfaces a content-length mismatch on the orphaned stream, which Node.js treats as an unhandled error and terminates the process. A remote, unauthenticated server can trigger this with a single response, even when the application correctly catches the fetch() rejection, resulting in a denial of service. The issue is fixed in undici 6.29.1, 7.30.1, and 8.12.2, and users should upgrade to one of those versions or later. There is no workaround."
            }
          ],
          "value": "undici is an HTTP client library for Node.js. In versions 6.23.0 through 6.29.0, 7.18.0 through 7.30.0, and 8.0.0 through 8.12.1, its fetch() implementation crashes the Node.js process when a malicious server returns a response with more than five content codings and closes the connection before sending the body. undici rejects such responses because of a content-encoding limit, but it created the internal response stream before that check and returned without attaching an error listener or aborting the request, so the early close surfaces a content-length mismatch on the orphaned stream, which Node.js treats as an unhandled error and terminates the process. A remote, unauthenticated server can trigger this with a single response, even when the application correctly catches the fetch() rejection, resulting in a denial of service. The issue is fixed in undici 6.29.1, 7.30.1, and 8.12.2, and users should upgrade to one of those versions or later. There is no workaround."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-248",
              "description": "CWE-248: Uncaught Exception",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-459",
              "description": "CWE-459: Incomplete Cleanup",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-15T18:08:31.243Z",
        "orgId": "ce714d77-add3-4f53-aff5-83d477b104bb",
        "shortName": "openjs"
      },
      "references": [
        {
          "url": "https://github.com/nodejs/undici/security/advisories/GHSA-xjj6-f33q-929c"
        },
        {
          "url": "https://cna.openjsf.org/security-advisories.html"
        }
      ],
      "title": "undici vulnerable to Denial of Service via unhandled error on excessive content-encodings",
      "x_generator": {
        "engine": "cve-kit 1.0.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ce714d77-add3-4f53-aff5-83d477b104bb",
    "assignerShortName": "openjs",
    "cveId": "CVE-2026-109869",
    "datePublished": "2026-10-15T18:08:31.243Z",
    "dateReserved": "2026-10-13T08:52:10.454Z",
    "dateUpdated": "2026-10-16T20:06:00.782Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-19534 (GCVE-0-2026-19534)

Vulnerability from cvelistv5 – Published: 2026-09-04 17:10 – Updated: 2026-09-04 18:18

Title

undici vulnerable to Denial of Service via unrequested WebSocket subprotocol

Summary

undici's WebSocket client crashes the whole Node.js process during the opening handshake when a server responds with a subprotocol that the client never requested. A default WebSocket connection sends no subprotocol, but if the server's 101 response includes a Sec-WebSocket-Protocol header, undici dereferences a null value while checking it against the requested list and throws an uncaught TypeError. Because that code runs inside a microtask with no surrounding error handling, the exception propagates and terminates the process under Node's default behavior, instead of gracefully failing the connection as required by the WebSocket protocol. Any application that opens a WebSocket to an attacker-controlled or compromised server, or over a plaintext connection subject to a machine-in-the-middle, can be crashed remotely without authentication in the default configuration. This affects undici versions from 6.7.0 up to 6.28.1, from 7.0.0 up to 7.29.1, and from 8.0.0 up to 8.10.2. Users should upgrade to undici 6.28.1, 7.29.1, or 8.10.2.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-04 18:18 UTC

CWE

CWE-248 - Uncaught Exception
CWE-252 - Unchecked Return Value

Assigner

openjs CNA under the redhat root

CNA scorecard C 65/100 over 131 records in the last 180 days details

References

2 references

URL	Tags
https://github.com/nodejs/undici/security/advisor…
https://cna.openjsf.org/security-advisories.html

Impacted products

1 product

Vendor	Product	Version
undici	undici	Affected: 6.7.0 , < 6.28.1 (semver) Unaffected: 6.28.1 (semver) Affected: 7.0.0 , < 7.29.1 (semver) Unaffected: 7.29.1 (semver) Affected: 8.0.0 , < 8.10.2 (semver) Unaffected: 8.10.2 (semver)

Credits

manus-use mcollina UlisesGascon

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-19534",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-04T18:18:18.694757Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-04T18:18:31.205Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "packageURL": "pkg:npm/undici",
          "product": "undici",
          "vendor": "undici",
          "versions": [
            {
              "lessThan": "6.28.1",
              "status": "affected",
              "version": "6.7.0",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "6.28.1",
              "versionType": "semver"
            },
            {
              "lessThan": "7.29.1",
              "status": "affected",
              "version": "7.0.0",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "7.29.1",
              "versionType": "semver"
            },
            {
              "lessThan": "8.10.2",
              "status": "affected",
              "version": "8.0.0",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "8.10.2",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "manus-use"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "mcollina"
        },
        {
          "lang": "en",
          "type": "remediation reviewer",
          "value": "UlisesGascon"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "undici\u0027s WebSocket client crashes the whole Node.js process during the opening handshake when a server responds with a subprotocol that the client never requested. A default WebSocket connection sends no subprotocol, but if the server\u0027s 101 response includes a Sec-WebSocket-Protocol header, undici dereferences a null value while checking it against the requested list and throws an uncaught TypeError. Because that code runs inside a microtask with no surrounding error handling, the exception propagates and terminates the process under Node\u0027s default behavior, instead of gracefully failing the connection as required by the WebSocket protocol. Any application that opens a WebSocket to an attacker-controlled or compromised server, or over a plaintext connection subject to a machine-in-the-middle, can be crashed remotely without authentication in the default configuration. This affects undici versions from 6.7.0 up to 6.28.1, from 7.0.0 up to 7.29.1, and from 8.0.0 up to 8.10.2. Users should upgrade to undici 6.28.1, 7.29.1, or 8.10.2."
            }
          ],
          "value": "undici\u0027s WebSocket client crashes the whole Node.js process during the opening handshake when a server responds with a subprotocol that the client never requested. A default WebSocket connection sends no subprotocol, but if the server\u0027s 101 response includes a Sec-WebSocket-Protocol header, undici dereferences a null value while checking it against the requested list and throws an uncaught TypeError. Because that code runs inside a microtask with no surrounding error handling, the exception propagates and terminates the process under Node\u0027s default behavior, instead of gracefully failing the connection as required by the WebSocket protocol. Any application that opens a WebSocket to an attacker-controlled or compromised server, or over a plaintext connection subject to a machine-in-the-middle, can be crashed remotely without authentication in the default configuration. This affects undici versions from 6.7.0 up to 6.28.1, from 7.0.0 up to 7.29.1, and from 8.0.0 up to 8.10.2. Users should upgrade to undici 6.28.1, 7.29.1, or 8.10.2."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-248",
              "description": "CWE-248: Uncaught Exception",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-252",
              "description": "CWE-252: Unchecked Return Value",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-04T17:10:05.081Z",
        "orgId": "ce714d77-add3-4f53-aff5-83d477b104bb",
        "shortName": "openjs"
      },
      "references": [
        {
          "url": "https://github.com/nodejs/undici/security/advisories/GHSA-rfgv-xxqx-mfg5"
        },
        {
          "url": "https://cna.openjsf.org/security-advisories.html"
        }
      ],
      "title": "undici vulnerable to Denial of Service via unrequested WebSocket subprotocol",
      "x_generator": {
        "engine": "cve-kit 1.0.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ce714d77-add3-4f53-aff5-83d477b104bb",
    "assignerShortName": "openjs",
    "cveId": "CVE-2026-19534",
    "datePublished": "2026-09-04T17:10:05.081Z",
    "dateReserved": "2026-08-11T09:36:47.101Z",
    "dateUpdated": "2026-09-04T18:18:31.205Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-27145 (GCVE-0-2026-27145)

Vulnerability from cvelistv5 – Published: 2026-06-02 22:01 – Updated: 2026-09-18 12:04

Title

Inefficient candidate hostname parsing in crypto/x509

Summary

(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries. This caused strings.Split(host, ".") to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically based on the number of SAN entries multiplied by the hostname's label count. Because x509.Verify validates hostnames before building the certificate chain, this overhead occurred even for untrusted certificates.

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-06-04 12:34 UTC

CWE

CWE-407 - Inefficient Algorithmic Complexity
CWE-606 - Unchecked Input for Loop Condition

Assigner

Go CNA under the Google root

CNA scorecard E 42/100 over 64 records in the last 180 days details

References

100 references

URL	Tags
https://go.dev/cl/783621
https://go.dev/issue/79694
https://groups.google.com/g/golang-announce/c/tKs…
https://pkg.go.dev/vuln/GO-2026-5037
https://access.redhat.com/security/cve/CVE-2026-27145	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2484207	issue-trackingx_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/v…	x_sadp-csaf-vex
https://access.redhat.com/errata/RHSA-2026:42079	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42080	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:68334	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:68335	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:53416	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:50319	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54757	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57482	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42082	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42150	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42151	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42240	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:49703	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:49702	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:53413	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:53374	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54168	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:51187	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:46394	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:46395	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:29980	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:35832	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34357	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:39005	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42946	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:39573	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:38995	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41930	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:61253	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60354	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57649	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:53412	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60315	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:49712	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:53415	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54401	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:29981	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34359	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:39879	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36317	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54531	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:61314	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54500	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41030	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:44622	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:47149	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:53530	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:52946	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:66022	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:51057	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60387	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:47737	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60390	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60388	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54427	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60391	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60386	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:63016	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42142	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33574	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:23262	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:23264	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54441	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42644	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36648	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41036	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60025	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57488	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54603	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:49705	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:49729	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:49744	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:49765	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:49770	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:50205	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36797	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42043	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42047	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42050	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42051	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42049	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:55899	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54435	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54525	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57194	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59556	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59593	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59557	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54432	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59579	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59558	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:47735	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59559	vendor-advisoryx_refsource_REDHAT

Impacted products

233 products

Vendor	Product	Version
Go standard library	crypto/x509	Affected: 0 , < 1.25.11 (semver) Affected: 1.26.0-0 , < 1.26.4 (semver)
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 8	Unaffected: 0:1.6.7-1.el8ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.5::el8
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 9	Unaffected: 0:1.6.7-1.el9ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.5::el9
Red Hat	Red Hat Ansible Automation Platform 2.6 for RHEL 10	Unaffected: 0:1.6.6-1.el10ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.6::el10
Red Hat	Red Hat Ansible Automation Platform 2.6 for RHEL 9	Unaffected: 0:1.6.6-1.el9ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.6::el9
Red Hat	Red Hat Ansible Automation Platform 2.7 for RHEL 10	Unaffected: 0:1.6.6-1.el10ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.7::el10
Red Hat	Red Hat Ansible Automation Platform 2.7 for RHEL 9	Unaffected: 0:1.6.6-1.el9ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.7::el9
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:1.26.4-1.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:0.152.1-1.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:0.9.27-7.el10_2.2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 1:0.3.8-6.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:0.4.9.2-1.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:0.2.10-1.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:1.0.0-4.el10_2.5 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:1.0.1-2.el10_2.3 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:1.26.5-1.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:1.26.1-1.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:0.4.7-5.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 1:0.3.2-5.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:0.152.1-1.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:0.2.3-6.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 7 Extended Lifecycle Support	Unaffected: 0:1.4.0-8.el7_9 , < * (rpm) cpe:/o:redhat:rhel_els:7
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 8100020260710105056.a3795dee , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 1:0.2.5-9.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:1.26.4-1.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:0.152.1-1.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 2:1.22.2-7.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 1:0.2.7-8.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 1:0.2.2-1.el9_2.4 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 0:1.26.5-1.el9_2 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	Unaffected: 0:0.152.1-1.el9_4 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.4
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	Unaffected: 0:1.26.5-1.el9_4 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.4
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	Unaffected: 1:0.2.4-9.el9_4 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.4
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 0:1.26.5-1.el9_6 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 0:0.152.1-1.el9_6 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 1:0.2.7-1.el9_6.5 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat OpenShift Container Platform 4.18	Unaffected: 0:0.23.0-5.rhaos4.18.el8 , < * (rpm) cpe:/a:redhat:openshift:4.18::el8
Red Hat	Red Hat OpenStack Platform 16.2	Unaffected: 0:0.2.1-1.1.el8ost , < * (rpm) cpe:/a:redhat:openstack:16.2::el8
Red Hat	Red Hat Satellite 6.16 for RHEL 8	Unaffected: 0:0.0.4-1.el8sat , < * (rpm) cpe:/a:redhat:satellite:6.16::el8
Red Hat	Red Hat Satellite 6.16 for RHEL 9	Unaffected: 0:0.0.4-1.el9sat , < * (rpm) cpe:/a:redhat:satellite:6.16::el9
Red Hat	Red Hat Satellite 6.17 for RHEL 9	Unaffected: 0:0.0.4-1.el9sat , < * (rpm) cpe:/a:redhat:satellite:6.17::el9
Red Hat	Red Hat Satellite 6.18 for RHEL 9	Unaffected: 0:0.0.4-1.el9sat , < * (rpm) cpe:/a:redhat:satellite:6.18::el9
Red Hat	Red Hat Satellite 6.19 for RHEL 9	Unaffected: 0:0.0.4-1.el9sat , < * (rpm) cpe:/a:redhat:satellite:6.19::el9
Red Hat	RHEM 1.1 for RHEL 10	Unaffected: 0:1.1.4-1.el10em , < * (rpm) cpe:/a:redhat:edge_manager:1.1::el10
Red Hat	RHEM 1.1 for RHEL 9	Unaffected: 0:1.1.4-1.el9em , < * (rpm) cpe:/a:redhat:edge_manager:1.1::el9
Red Hat	RHEM 1.2 for RHEL 10	Unaffected: 0:1.2.1-1.el10 , < * (rpm) cpe:/a:redhat:edge_manager:1.2::el10
Red Hat	RHEM 1.2 for RHEL 9	Unaffected: 0:1.2.1-1.el9 , < * (rpm) cpe:/a:redhat:edge_manager:1.2::el9
Red Hat	Streams for Apache Kafka 3.2.1	Unaffected: danielqsj-kafka_exporter , < * (rpm) cpe:/a:redhat:amq_streams:3.2::el9
Red Hat	Cert Manager support for Red Hat OpenShift release 1.19	Unaffected: 1786613805 , < * (rpm) cpe:/a:redhat:cert_manager:1.19::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1787593946 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Compliance Operator 1	Unaffected: 1786380082 , < * (rpm) cpe:/a:redhat:openshift_compliance_operator:1::el9
Red Hat	external secrets operator for Red Hat OpenShift 1.1	Unaffected: 1786614676 , < * (rpm) cpe:/a:redhat:external_secrets_operator:1.1::el9
Red Hat	multicluster engine for Kubernetes 2.1	Unaffected: 1786549223 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.10::el9
Red Hat	multicluster engine for Kubernetes 2.1	Unaffected: 1787201612 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.10::el9
Red Hat	multicluster engine for Kubernetes 2.1	Unaffected: 1786764622 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.10::el9
Red Hat	multicluster engine for Kubernetes 2.1	Unaffected: 1787176886 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.10::el9
Red Hat	multicluster engine for Kubernetes 2.11	Unaffected: 1786911941 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.11::el9
Red Hat	multicluster engine for Kubernetes 2.11	Unaffected: 1786911952 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.11::el9
Red Hat	multicluster engine for Kubernetes 2.11	Unaffected: 1786911945 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.11::el9
Red Hat	multicluster engine for Kubernetes 2.11	Unaffected: 1786912006 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.11::el9
Red Hat	multicluster engine for Kubernetes 2.11	Unaffected: 1786911973 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.11::el9
Red Hat	multicluster engine for Kubernetes 2.11	Unaffected: 1786911950 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.11::el9
Red Hat	multicluster engine for Kubernetes 2.11	Unaffected: 1786911984 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.11::el9
Red Hat	multicluster engine for Kubernetes 2.11	Unaffected: 1786907276 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.11::el9
Red Hat	multicluster engine for Kubernetes 2.11	Unaffected: 1787238383 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.11::el9
Red Hat	multicluster engine for Kubernetes 2.11	Unaffected: 1787239116 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.11::el9
Red Hat	multicluster engine for Kubernetes 2.11	Unaffected: 1787239595 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.11::el9
Red Hat	multicluster engine for Kubernetes 2.17	Unaffected: 1786577950 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.17::el9
Red Hat	multicluster engine for Kubernetes 2.17	Unaffected: 1786750700 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.17::el9
Red Hat	multicluster engine for Kubernetes 2.17	Unaffected: 1786983362 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.17::el9
Red Hat	multicluster engine for Kubernetes 2.17	Unaffected: 1786664288 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.17::el9
Red Hat	multicluster engine for Kubernetes 2.6	Unaffected: 1787259112 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.6::el9
Red Hat	multicluster engine for Kubernetes 2.6	Unaffected: 1787264185 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.6::el9
Red Hat	multicluster engine for Kubernetes 2.6	Unaffected: 1787259740 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.6::el9
Red Hat	multicluster engine for Kubernetes 2.6	Unaffected: 1787260821 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.6::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1784737366 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1784738758 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1784677239 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1787259015 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1787259059 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1787259011 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1787259016 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1787258993 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1787259044 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1787259047 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1787259108 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1787259099 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1787259126 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1787259114 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1787259113 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.9	Unaffected: 1787195995 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.9::el9
Red Hat	multicluster engine for Kubernetes 2.9	Unaffected: 1787201646 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.9::el9
Red Hat	multicluster engine for Kubernetes 2.9	Unaffected: 1786764601 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.9::el9
Red Hat	multicluster engine for Kubernetes 2.9	Unaffected: 1787176716 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.9::el9
Red Hat	Multicluster Global Hub 1.4.5	Unaffected: 1784061472 , < * (rpm) cpe:/a:redhat:multicluster_globalhub:1.4::el9
Red Hat	Multicluster Global Hub 1.6.5	Unaffected: 1784152046 , < * (rpm) cpe:/a:redhat:multicluster_globalhub:1.6::el9
Red Hat	Multicluster Global Hub 1.7.0	Unaffected: 1784768332 , < * (rpm) Unaffected: 1785775948 , < * (rpm) cpe:/a:redhat:multicluster_globalhub:1.7::el9
Red Hat	Multicluster Global Hub 1.8.0	Unaffected: 1785763319 , < * (rpm) cpe:/a:redhat:multicluster_globalhub:1.8::el9
Red Hat	OpenShift API for Data Protection 1.5	Unaffected: 1788860461 , < * (rpm) cpe:/a:redhat:openshift_api_data_protection:1.5::el9
Red Hat	OpenShift Developer Tools and Services 1.6.3	Unaffected: 1784727697 , < * (rpm) cpe:/a:redhat:source_to_image:1.6::el8
Red Hat	OpenShift Developer Tools and Services 1.6.3	Unaffected: 1784728036 , < * (rpm) cpe:/a:redhat:source_to_image:1.6::el8
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.11	Unaffected: 1787260689 , < * (rpm) cpe:/a:redhat:acm:2.11::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.11	Unaffected: 1787262214 , < * (rpm) cpe:/a:redhat:acm:2.11::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.11	Unaffected: 1787260663 , < * (rpm) cpe:/a:redhat:acm:2.11::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.11	Unaffected: 1787263584 , < * (rpm) cpe:/a:redhat:acm:2.11::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1784677172 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1784638644 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1784590741 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1787259106 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1787259284 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1787259310 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1787263693 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.14	Unaffected: 1787183407 , < * (rpm) cpe:/a:redhat:acm:2.14::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.14	Unaffected: 1786976940 , < * (rpm) cpe:/a:redhat:acm:2.14::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.14	Unaffected: 1787172840 , < * (rpm) cpe:/a:redhat:acm:2.14::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.14	Unaffected: 1787170830 , < * (rpm) cpe:/a:redhat:acm:2.14::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.15	Unaffected: 1786547792 , < * (rpm) cpe:/a:redhat:acm:2.15::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.15	Unaffected: 1786547807 , < * (rpm) cpe:/a:redhat:acm:2.15::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.15	Unaffected: 1786549537 , < * (rpm) cpe:/a:redhat:acm:2.15::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.16	Unaffected: 1787252179 , < * (rpm) cpe:/a:redhat:acm:2.16::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.16	Unaffected: 1787242135 , < * (rpm) cpe:/a:redhat:acm:2.16::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.16	Unaffected: 1787242105 , < * (rpm) cpe:/a:redhat:acm:2.16::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.16	Unaffected: 1787242321 , < * (rpm) cpe:/a:redhat:acm:2.16::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.17	Unaffected: 1787243221 , < * (rpm) cpe:/a:redhat:acm:2.17::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.17	Unaffected: 1787242131 , < * (rpm) cpe:/a:redhat:acm:2.17::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.17	Unaffected: 1787242099 , < * (rpm) cpe:/a:redhat:acm:2.17::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.17	Unaffected: 1787242108 , < * (rpm) cpe:/a:redhat:acm:2.17::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.17	Unaffected: 1788105072 , < * (rpm) cpe:/a:redhat:acm:2.17::el9
Red Hat	Red Hat Ansible Automation Platform 2.7	Unaffected: 1783917963 , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.7::el9
Red Hat	Red Hat Developer Hub 1.9	Unaffected: 1782767215 , < * (rpm) cpe:/a:redhat:rhdh:1.9::el9
Red Hat	Red Hat Hardened Images	Unaffected: 1.25.11-2.hum1 , < * (rpm) cpe:/a:redhat:hummingbird:1
Red Hat	Red Hat Hardened Images	Unaffected: 1.26.4-2.hum1 , < * (rpm) cpe:/a:redhat:hummingbird:1
Red Hat	Red Hat Lightspeed (formerly Insights) for Runtimes 1.0	Unaffected: 1786483782 , < * (rpm) cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1784004914 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift Builds 1.7.3	Unaffected: 1783057868 , < * (rpm) cpe:/a:redhat:openshift_builds:1.7::el9
Red Hat	Red Hat OpenShift Builds 1.8.1	Unaffected: 1784121108 , < * (rpm) cpe:/a:redhat:openshift_builds:1.8::el9
Red Hat	Red Hat OpenShift Builds 1.8.1	Unaffected: 1783612119 , < * (rpm) cpe:/a:redhat:openshift_builds:1.8::el9
Red Hat	Red Hat OpenShift Container Platform 4.17	Unaffected: 1787554347 , < * (rpm) cpe:/a:redhat:openshift:4.17::el9
Red Hat	Red Hat OpenShift Container Platform 4.18	Unaffected: 1786754425 , < * (rpm) cpe:/a:redhat:openshift:4.18::el9
Red Hat	Red Hat OpenShift Container Platform 4.21	Unaffected: 1786526139 , < * (rpm) cpe:/a:redhat:openshift:4.21::el9
Red Hat	Red Hat OpenShift distributed tracing 3.10.2	Unaffected: 1785704636 , < * (rpm) cpe:/a:redhat:openshift_distributed_tracing:3.10::el9
Red Hat	Red Hat OpenShift distributed tracing 3.10.2	Unaffected: 1785704547 , < * (rpm) cpe:/a:redhat:openshift_distributed_tracing:3.10::el9
Red Hat	Red Hat OpenShift Service Mesh 3.0	Unaffected: 1784885742 , < * (rpm) cpe:/a:redhat:service_mesh:3.0::el9
Red Hat	Red Hat OpenShift Service Mesh 3.0	Unaffected: 1784885559 , < * (rpm) cpe:/a:redhat:service_mesh:3.0::el9
Red Hat	Red Hat OpenShift Service Mesh 3.0	Unaffected: 1784908682 , < * (rpm) cpe:/a:redhat:service_mesh:3.0::el9
Red Hat	Red Hat OpenShift Service Mesh 3.0	Unaffected: 1784917979 , < * (rpm) cpe:/a:redhat:service_mesh:3.0::el9
Red Hat	Red Hat OpenShift Service Mesh 3.1	Unaffected: 1784885281 , < * (rpm) cpe:/a:redhat:service_mesh:3.1::el9
Red Hat	Red Hat OpenShift Service Mesh 3.1	Unaffected: 1784885133 , < * (rpm) cpe:/a:redhat:service_mesh:3.1::el9
Red Hat	Red Hat OpenShift Service Mesh 3.1	Unaffected: 1784953556 , < * (rpm) cpe:/a:redhat:service_mesh:3.1::el9
Red Hat	Red Hat OpenShift Service Mesh 3.1	Unaffected: 1784918113 , < * (rpm) cpe:/a:redhat:service_mesh:3.1::el9
Red Hat	Red Hat OpenShift Service Mesh 3.2	Unaffected: 1784921753 , < * (rpm) cpe:/a:redhat:service_mesh:3.2::el9
Red Hat	Red Hat OpenShift Service Mesh 3.2	Unaffected: 1784921772 , < * (rpm) cpe:/a:redhat:service_mesh:3.2::el9
Red Hat	Red Hat OpenShift Service Mesh 3.2	Unaffected: 1784953743 , < * (rpm) cpe:/a:redhat:service_mesh:3.2::el9
Red Hat	Red Hat OpenShift Service Mesh 3.2	Unaffected: 1784918117 , < * (rpm) cpe:/a:redhat:service_mesh:3.2::el9
Red Hat	Red Hat OpenShift Service Mesh 3.3	Unaffected: 1784885810 , < * (rpm) cpe:/a:redhat:service_mesh:3.3::el9
Red Hat	Red Hat OpenShift Service Mesh 3.3	Unaffected: 1784885681 , < * (rpm) cpe:/a:redhat:service_mesh:3.3::el9
Red Hat	Red Hat OpenShift Service Mesh 3.3	Unaffected: 1784908639 , < * (rpm) cpe:/a:redhat:service_mesh:3.3::el9
Red Hat	Red Hat OpenShift Service Mesh 3.3	Unaffected: 1785316150 , < * (rpm) cpe:/a:redhat:service_mesh:3.3::el9
Red Hat	Red Hat OpenShift Service Mesh 3.4	Unaffected: 1785131046 , < * (rpm) cpe:/a:redhat:service_mesh:3.4::el9
Red Hat	Red Hat OpenShift Service Mesh 3.4	Unaffected: 1785131063 , < * (rpm) cpe:/a:redhat:service_mesh:3.4::el9
Red Hat	Red Hat OpenShift Service Mesh 3.4	Unaffected: 1785131291 , < * (rpm) cpe:/a:redhat:service_mesh:3.4::el9
Red Hat	Red Hat OpenShift Service Mesh 3.4	Unaffected: 1785317214 , < * (rpm) cpe:/a:redhat:service_mesh:3.4::el9
Red Hat	Red Hat Trusted Artifact Signer 1.4	Unaffected: 4-1.4.2 , < * (rpm) Unaffected: 4-1.4.3 , < * (rpm) cpe:/a:redhat:trusted_artifact_signer:1.4::el9
Red Hat	Red Hat Web Terminal 1.11	Unaffected: 1784296203 , < * (rpm) cpe:/a:redhat:webterminal:1.11::el9
Red Hat	Red Hat Web Terminal 1.12	Unaffected: 1784247610 , < * (rpm) cpe:/a:redhat:webterminal:1.12::el9
Red Hat	Red Hat Web Terminal 1.13	Unaffected: 1784296127 , < * (rpm) cpe:/a:redhat:webterminal:1.13::el9
Red Hat	Red Hat Web Terminal 1.14	Unaffected: 1784296114 , < * (rpm) cpe:/a:redhat:webterminal:1.14::el9
Red Hat	Red Hat Web Terminal 1.15	Unaffected: 1784296033 , < * (rpm) cpe:/a:redhat:webterminal:1.15::el9
Red Hat	Red Hat Web Terminal 1.16	Unaffected: 1786654871 , < * (rpm) cpe:/a:redhat:webterminal:1.16::el9
Red Hat	Assisted Installer for Red Hat OpenShift Container Platform 2	cpe:/a:redhat:assisted_installer:2
Red Hat	Confidential Compute Attestation	cpe:/a:redhat:confidential_compute_attestation:1
Red Hat	Cryostat 4	cpe:/a:redhat:cryostat:4
Red Hat	Custom Metric Autoscaler operator for Red Hat Openshift	cpe:/a:redhat:openshift_custom_metrics_autoscaler:2
Red Hat	Deployment Validation Operator	cpe:/a:redhat:deployment_validator_operator
Red Hat	ExternalDNS Operator	cpe:/a:redhat:ext_dns_optr:1
Red Hat	Fence Agents Remediation Operator	cpe:/a:redhat:workload_availability_far:0
Red Hat	File Integrity Operator	cpe:/a:redhat:openshift_file_integrity_operator:1
Red Hat	Gatekeeper 3	cpe:/a:redhat:gatekeeper:3
Red Hat	Logging Subsystem for Red Hat OpenShift	cpe:/a:redhat:logging:6
Red Hat	Logical Volume Manager Storage	cpe:/a:redhat:lvms:4
Red Hat	Machine Deletion Remediation Operator	cpe:/a:redhat:workload_availability_mdr:0
Red Hat	Migration Toolkit for Applications 8	cpe:/a:redhat:migration_toolkit_applications:8
Red Hat	Migration Toolkit for Containers	cpe:/a:redhat:rhmt:1
Red Hat	mirror registry for Red Hat OpenShift 2	cpe:/a:redhat:mirror_registry:2
Red Hat	Multiarch Tuning Operator	cpe:/a:redhat:multiarch_tuning_operator
Red Hat	Multicluster Engine for Kubernetes	cpe:/a:redhat:multicluster_engine
Red Hat	Network Observability Operator	cpe:/a:redhat:network_observ_optr:1
Red Hat	Node HealthCheck Operator	cpe:/a:redhat:workload_availability_nhc:0
Red Hat	OpenShift Developer Tools and Services	cpe:/a:redhat:ocp_tools
Red Hat	OpenShift Lightspeed	cpe:/a:redhat:openshift_lightspeed
Red Hat	OpenShift Pipelines	cpe:/a:redhat:openshift_pipelines:1
Red Hat	OpenShift Serverless	cpe:/a:redhat:serverless:1
Red Hat	OpenShift Service Mesh 2	cpe:/a:redhat:service_mesh:2
Red Hat	OpenShift Service Mesh 3	cpe:/a:redhat:service_mesh:3
Red Hat	Power monitoring for Red Hat OpenShift	cpe:/a:redhat:openshift_power_monitoring
Red Hat	Red Hat 3scale API Management Platform 2	cpe:/a:redhat:red_hat_3scale_amp:2
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2	cpe:/a:redhat:acm:2
Red Hat	Red Hat Advanced Cluster Security 4	cpe:/a:redhat:advanced_cluster_security:4
Red Hat	Red Hat Ansible Automation Platform 2	cpe:/a:redhat:ansible_automation_platform:2
Red Hat	Red Hat Ceph Storage 5	cpe:/a:redhat:ceph_storage:5
Red Hat	Red Hat Ceph Storage 6	cpe:/a:redhat:ceph_storage:6
Red Hat	Red Hat Ceph Storage 7	cpe:/a:redhat:ceph_storage:7
Red Hat	Red Hat Ceph Storage 8	cpe:/a:redhat:ceph_storage:8
Red Hat	Red Hat Ceph Storage 9	cpe:/a:redhat:ceph_storage:9
Red Hat	Red Hat Connectivity Link 1	cpe:/a:redhat:connectivity_link:1
Red Hat	Red Hat Edge Manager 1	cpe:/a:redhat:edge_manager:1
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux AI (RHEL AI) 3	cpe:/a:redhat:enterprise_linux_ai:3
Red Hat	Red Hat OpenShift AI (RHOAI)	cpe:/a:redhat:openshift_ai
Red Hat	Red Hat OpenShift Cluster Manager CLI	cpe:/a:redhat:openshift_cluster_manager_cli:1
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4
Red Hat	Red Hat Openshift Data Foundation 4	cpe:/a:redhat:openshift_data_foundation:4
Red Hat	Red Hat OpenShift Dev Spaces	cpe:/a:redhat:openshift_devspaces:3
Red Hat	Red Hat OpenShift Dev Workspaces Operator	cpe:/a:redhat:devworkspace
Red Hat	Red Hat OpenShift distributed tracing 3	cpe:/a:redhat:openshift_distributed_tracing:3
Red Hat	Red Hat OpenShift for Windows Containers	cpe:/a:redhat:windows_machine_config
Red Hat	Red Hat OpenShift GitOps	cpe:/a:redhat:openshift_gitops:1
Red Hat	Red Hat OpenShift on AWS	cpe:/a:redhat:openshift_service_on_aws:1
Red Hat	Red Hat OpenShift Virtualization 4	cpe:/a:redhat:container_native_virtualization:4
Red Hat	Red Hat OpenStack Platform 16.2	cpe:/a:redhat:openstack:16.2
Red Hat	Red Hat OpenStack Platform 17.1	cpe:/a:redhat:openstack:17.1
Red Hat	Red Hat OpenStack Platform 18.0	cpe:/a:redhat:openstack:18.0
Red Hat	Red Hat Quay 3	cpe:/a:redhat:quay:3
Red Hat	Red Hat Satellite 6	cpe:/a:redhat:satellite:6
Red Hat	Red Hat Service Interconnect 2	cpe:/a:redhat:service_interconnect:2
Red Hat	Security Profiles Operator	cpe:/a:redhat:openshift_security_profiles_operator:1
Red Hat	Service Telemetry Framework 1.5	cpe:/a:redhat:stf:1.5
Red Hat	streams for Apache Kafka 2	cpe:/a:redhat:amq_streams:2
Red Hat	Zero Trust Workload Identity Manager	cpe:/a:redhat:zero_trust_workload_identity_manager:1
Red Hat	Zero Trust Workload Identity Manager - Tech Preview	cpe:/a:redhat:zero_trust_workload_identity_manager:0

Credits

Jakub Ciolek - https://ciolek.dev/

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 6.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-27145",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-04T12:34:03.859208Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-04T12:34:53.136Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.5::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "receptor",
            "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.6.7-1.el8ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "receptor",
            "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.6.7-1.el9ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.6::el10"
            ],
            "defaultStatus": "affected",
            "packageName": "receptor",
            "product": "Red Hat Ansible Automation Platform 2.6 for RHEL 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.6.6-1.el10ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "receptor",
            "product": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.6.6-1.el9ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.7::el10"
            ],
            "defaultStatus": "affected",
            "packageName": "receptor",
            "product": "Red Hat Ansible Automation Platform 2.7 for RHEL 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.6.6-1.el10ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "receptor",
            "product": "Red Hat Ansible Automation Platform 2.7 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.6.6-1.el9ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.26.4-1.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "opentelemetry-collector",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.152.1-1.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "golang-github-openprinting-ipp-usb",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.9.27-7.el10_2.2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:0.3.8-6.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "yggdrasil",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.4.9.2-1.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc-worker-playbook",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.2.10-1.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "go-fdo-client",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.0.0-4.el10_2.5",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "go-fdo-server",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.0.1-2.el10_2.3",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.26.5-1.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "delve",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.26.1-1.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "yggdrasil",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.4.7-5.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:0.3.2-5.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "opentelemetry-collector",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.152.1-1.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc-worker-playbook",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.2.3-6.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:rhel_els:7"
            ],
            "defaultStatus": "affected",
            "packageName": "host-metering",
            "product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.4.0-8.el7_9",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "go-toolset:rhel8",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "8100020260710105056.a3795dee",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:0.2.5-9.el8_10",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.26.4-1.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "opentelemetry-collector",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.152.1-1.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "skopeo",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "2:1.22.2-7.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:0.2.7-8.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:0.2.2-1.el9_2.4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.2"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.26.5-1.el9_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "opentelemetry-collector",
            "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.152.1-1.el9_4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.26.5-1.el9_4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:0.2.4-9.el9_4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.26.5-1.el9_6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "opentelemetry-collector",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.152.1-1.el9_6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:0.2.7-1.el9_6.5",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.18::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "butane",
            "product": "Red Hat OpenShift Container Platform 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.23.0-5.rhaos4.18.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:16.2::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "collectd-sensubility",
            "product": "Red Hat OpenStack Platform 16.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.2.1-1.1.el8ost",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.16::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "yggdrasil-worker-forwarder",
            "product": "Red Hat Satellite 6.16 for RHEL 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.0.4-1.el8sat",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "yggdrasil-worker-forwarder",
            "product": "Red Hat Satellite 6.16 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.0.4-1.el9sat",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "yggdrasil-worker-forwarder",
            "product": "Red Hat Satellite 6.17 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.0.4-1.el9sat",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "yggdrasil-worker-forwarder",
            "product": "Red Hat Satellite 6.18 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.0.4-1.el9sat",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "yggdrasil-worker-forwarder",
            "product": "Red Hat Satellite 6.19 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.0.4-1.el9sat",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.1::el10"
            ],
            "defaultStatus": "affected",
            "packageName": "flightctl",
            "product": "RHEM 1.1 for RHEL 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.1.4-1.el10em",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "flightctl",
            "product": "RHEM 1.1 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.1.4-1.el9em",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.2::el10"
            ],
            "defaultStatus": "affected",
            "packageName": "flightctl",
            "product": "RHEM 1.2 for RHEL 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.2.1-1.el10",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "flightctl",
            "product": "RHEM 1.2 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.2.1-1.el9",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:amq_streams:3.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "golang-github",
            "product": "Streams for Apache Kafka 3.2.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "danielqsj-kafka_exporter",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cert_manager:1.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cert-manager/jetstack-cert-manager-rhel9",
            "product": "Cert Manager support for Red Hat OpenShift release 1.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786613805",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/perses-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787593946",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_compliance_operator:1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "compliance/openshift-compliance-operator-bundle",
            "product": "Compliance Operator 1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786380082",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:external_secrets_operator:1.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "external-secrets-operator/external-secrets-rhel9",
            "product": "external secrets operator for Red Hat OpenShift 1.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786614676",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/clusterclaims-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786549223",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-curator-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787201612",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-image-set-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786764622",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/provider-credential-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787176886",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/addon-manager-rhel9",
            "product": "multicluster engine for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786911941",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/backplane-rhel9-operator",
            "product": "multicluster engine for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786911952",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/clusterlifecycle-state-metrics-rhel9",
            "product": "multicluster engine for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786911945",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/hypershift-addon-rhel9-operator",
            "product": "multicluster engine for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786912006",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/managedcluster-import-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786911973",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/multicloud-manager-rhel9",
            "product": "multicluster engine for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786911950",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/placement-rhel9",
            "product": "multicluster engine for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786911984",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/registration-operator-rhel9",
            "product": "multicluster engine for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786911984",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/work-rhel9",
            "product": "multicluster engine for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786907276",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-curator-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787238383",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-image-set-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787239116",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/provider-credential-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787239595",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/clusterclaims-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786577950",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-curator-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786750700",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-image-set-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786983362",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/provider-credential-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786664288",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/clusterclaims-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787259112",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-curator-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787264185",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-image-set-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787259740",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/provider-credential-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787260821",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/backplane-rhel9-operator",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784737366",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/hypershift-addon-rhel9-operator",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784738758",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/kube-rbac-proxy-mce-rhel9",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784677239",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/addon-manager-rhel9",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787259015",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/clusterclaims-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787259059",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-curator-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787259011",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-image-set-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787259016",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/clusterlifecycle-state-metrics-rhel9",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787258993",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/managedcluster-import-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787259044",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/multicloud-manager-rhel9",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787259047",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/placement-rhel9",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787259108",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/provider-credential-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787259099",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/registration-operator-rhel9",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787259126",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/registration-rhel9",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787259114",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/work-rhel9",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787259113",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.9::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/clusterclaims-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787195995",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.9::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-curator-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787201646",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.9::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-image-set-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786764601",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.9::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/provider-credential-controller-rhel9",
            "product": "multicluster engine for Kubernetes 2.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787176716",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_globalhub:1.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
            "product": "Multicluster Global Hub 1.4.5",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784061472",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_globalhub:1.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
            "product": "Multicluster Global Hub 1.6.5",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784152046",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_globalhub:1.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
            "product": "Multicluster Global Hub 1.7.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784768332",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785775948",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_globalhub:1.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
            "product": "Multicluster Global Hub 1.8.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785763319",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_api_data_protection:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "oadp/oadp-velero-rhel9",
            "product": "OpenShift API for Data Protection 1.5",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788860461",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:source_to_image:1.6::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "source-to-image/source-to-image-rhel8",
            "product": "OpenShift Developer Tools and Services 1.6.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784727697",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:source_to_image:1.6::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "source-to-image/source-to-image-rhel9",
            "product": "OpenShift Developer Tools and Services 1.6.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784728036",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicloud-integrations-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787260689",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-application-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787262214",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-channel-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787260663",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-subscription-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787263584",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/kube-rbac-proxy-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784677172",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multiclusterhub-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784638644",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-observability-rhel9-operator",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784590741",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicloud-integrations-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787259106",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-application-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787259284",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-channel-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787259310",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-subscription-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787263693",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.14::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicloud-integrations-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787183407",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.14::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-application-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786976940",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.14::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-channel-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787172840",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.14::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-subscription-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787170830",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.15::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-application-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.15",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786547792",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.15::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-channel-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.15",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786547807",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.15::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-subscription-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.15",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786549537",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicloud-integrations-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787252179",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-application-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787242135",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-channel-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787242105",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-subscription-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787242321",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicloud-integrations-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787243221",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-application-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787242131",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-channel-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787242099",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-subscription-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787242108",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/subctl-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788105072",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-automation-platform-27/receptor-rhel9",
            "product": "Red Hat Ansible Automation Platform 2.7",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783917963",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:rhdh:1.9::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhdh/rhdh-rhel9-operator",
            "product": "Red Hat Developer Hub 1.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782767215",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:hummingbird:1"
            ],
            "defaultStatus": "affected",
            "packageName": "golang1-25-main",
            "product": "Red Hat Hardened Images",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1.25.11-2.hum1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:hummingbird:1"
            ],
            "defaultStatus": "affected",
            "packageName": "golang1-26-main",
            "product": "Red Hat Hardened Images",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1.26.4-2.hum1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator",
            "product": "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786483782",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-rhel9-operator",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784004914",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_builds:1.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-builds/openshift-builds-waiters-rhel9",
            "product": "Red Hat OpenShift Builds 1.7.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783057868",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_builds:1.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-builds/openshift-builds-rhel9-operator",
            "product": "Red Hat OpenShift Builds 1.8.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784121108",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_builds:1.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-builds/openshift-builds-waiters-rhel9",
            "product": "Red Hat OpenShift Builds 1.8.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783612119",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-ansible-rhel9-operator",
            "product": "Red Hat OpenShift Container Platform 4.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787554347",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-ansible-rhel9-operator",
            "product": "Red Hat OpenShift Container Platform 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786754425",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.21::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-ansible-rhel9-operator",
            "product": "Red Hat OpenShift Container Platform 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786526139",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosdt/opentelemetry-collector-rhel9",
            "product": "Red Hat OpenShift distributed tracing 3.10.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785704636",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosdt/opentelemetry-rhel9-operator",
            "product": "Red Hat OpenShift distributed tracing 3.10.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785704547",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-cni-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784885742",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-pilot-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784885559",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-proxyv2-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784908682",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-rhel9-operator",
            "product": "Red Hat OpenShift Service Mesh 3.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784917979",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-cni-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784885281",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-pilot-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784885133",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-proxyv2-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784953556",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-rhel9-operator",
            "product": "Red Hat OpenShift Service Mesh 3.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784918113",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-cni-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784921753",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-pilot-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784921772",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-proxyv2-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784953743",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-rhel9-operator",
            "product": "Red Hat OpenShift Service Mesh 3.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784918117",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-cni-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784885810",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-pilot-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784885681",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-proxyv2-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784908639",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-rhel9-operator",
            "product": "Red Hat OpenShift Service Mesh 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785316150",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-cni-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785131046",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-pilot-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785131063",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-proxyv2-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785131291",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/istio-rhel9-operator",
            "product": "Red Hat OpenShift Service Mesh 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785317214",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "conforma-cli-stack-v1",
            "product": "Red Hat Trusted Artifact Signer 1.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "4-1.4.2",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "4-1.4.3",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:webterminal:1.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "web-terminal/web-terminal-exec-rhel9",
            "product": "Red Hat Web Terminal 1.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784296203",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:webterminal:1.12::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "web-terminal/web-terminal-exec-rhel9",
            "product": "Red Hat Web Terminal 1.12",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784247610",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:webterminal:1.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "web-terminal/web-terminal-exec-rhel9",
            "product": "Red Hat Web Terminal 1.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784296127",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:webterminal:1.14::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "web-terminal/web-terminal-exec-rhel9",
            "product": "Red Hat Web Terminal 1.14",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784296114",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:webterminal:1.15::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "web-terminal/web-terminal-exec-rhel9",
            "product": "Red Hat Web Terminal 1.15",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784296033",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:webterminal:1.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "web-terminal/web-terminal-exec-rhel9",
            "product": "Red Hat Web Terminal 1.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786654871",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:assisted_installer:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhai/assisted-installer-rhel9",
            "product": "Assisted Installer for Red Hat OpenShift Container Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:confidential_compute_attestation:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "build-of-trustee/trustee-rhel9-operator",
            "product": "Confidential Compute Attestation",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:confidential_compute_attestation:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-sandboxed-containers/osc-monitor-rhel9",
            "product": "Confidential Compute Attestation",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:cryostat:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "cryostat/cryostat-storage-rhel9",
            "product": "Cryostat 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_custom_metrics_autoscaler:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9",
            "product": "Custom Metric Autoscaler operator for Red Hat Openshift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:deployment_validator_operator"
            ],
            "defaultStatus": "affected",
            "packageName": "dvo/deployment-validation-rhel8-operator",
            "product": "Deployment Validation Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ext_dns_optr:1"
            ],
            "defaultStatus": "affected",
            "packageName": "edo/external-dns-rhel9",
            "product": "ExternalDNS Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ext_dns_optr:1"
            ],
            "defaultStatus": "affected",
            "packageName": "edo/external-dns-rhel9-operator",
            "product": "ExternalDNS Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_far:0"
            ],
            "defaultStatus": "affected",
            "packageName": "workload-availability/fence-agents-remediation-rhel8-operator",
            "product": "Fence Agents Remediation Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_file_integrity_operator:1"
            ],
            "defaultStatus": "affected",
            "packageName": "compliance/openshift-compliance-operator-bundle",
            "product": "File Integrity Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:gatekeeper:3"
            ],
            "defaultStatus": "unaffected",
            "packageName": "gatekeeper/gatekeeper-rhel9-operator",
            "product": "Gatekeeper 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:logging:6"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-logging/eventrouter-rhel9",
            "product": "Logging Subsystem for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:lvms:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "lvms4/lvms-rhel9-operator",
            "product": "Logical Volume Manager Storage",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:lvms:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "lvms4/topolvm-rhel8",
            "product": "Logical Volume Manager Storage",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:lvms:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "lvms4/topolvm-rhel9",
            "product": "Logical Volume Manager Storage",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_mdr:0"
            ],
            "defaultStatus": "affected",
            "packageName": "workload-availability/machine-deletion-remediation-rhel8-operator",
            "product": "Machine Deletion Remediation Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:migration_toolkit_applications:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "mta/mta-cli-rhel9",
            "product": "Migration Toolkit for Applications 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhmt:1"
            ],
            "defaultStatus": "affected",
            "packageName": "rhmtc/openshift-migration-registry-rhel8",
            "product": "Migration Toolkit for Containers",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:mirror_registry:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift/mirror-registry-rhel8",
            "product": "mirror registry for Red Hat OpenShift 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multiarch_tuning_operator"
            ],
            "defaultStatus": "affected",
            "packageName": "multiarch-tuning/multiarch-tuning-rhel9-operator",
            "product": "Multiarch Tuning Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/assisted-service-9-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "unaffected",
            "packageName": "multicluster-engine/discovery-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/hive-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/maestro-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:network_observ_optr:1"
            ],
            "defaultStatus": "affected",
            "packageName": "network-observability/network-observability-cli-rhel9",
            "product": "Network Observability Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_nhc:0"
            ],
            "defaultStatus": "affected",
            "packageName": "node-healthcheck-operator-tech-preview/node-healthcheck-operator-rhel8",
            "product": "Node HealthCheck Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_nhc:0"
            ],
            "defaultStatus": "affected",
            "packageName": "node-healthcheck-operator-tech-preview/node-healthcheck-rhel8-operator",
            "product": "Node HealthCheck Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_nhc:0"
            ],
            "defaultStatus": "affected",
            "packageName": "workload-availability/node-healthcheck-rhel8-operator",
            "product": "Node HealthCheck Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ocp_tools"
            ],
            "defaultStatus": "unaffected",
            "packageName": "helm",
            "product": "OpenShift Developer Tools and Services",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_lightspeed"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-lightspeed/lightspeed-rhel9-operator",
            "product": "OpenShift Lightspeed",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines-client",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-scheduler-rhel9",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:serverless:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "kn-workflow-plugin",
            "product": "OpenShift Serverless",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:serverless:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-serverless-1/kn-plugin-event-sender-rhel9",
            "product": "OpenShift Serverless",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:serverless:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-serverless-1/logic-rhel9-operator",
            "product": "OpenShift Serverless",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:serverless:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-serverless-clients",
            "product": "OpenShift Serverless",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-service-mesh/kiali-rhel8",
            "product": "OpenShift Service Mesh 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rh-osbs/openshift-golang-builder",
            "product": "OpenShift Service Mesh 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-service-mesh/kiali-rhel9",
            "product": "OpenShift Service Mesh 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_power_monitoring"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-power-monitoring/kepler-rhel9",
            "product": "Power monitoring for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:red_hat_3scale_amp:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "3scale-amp2/3scale-rhel7-operator",
            "product": "Red Hat 3scale API Management Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:red_hat_3scale_amp:2"
            ],
            "defaultStatus": "affected",
            "packageName": "3scale-amp2/3scale-rhel9-operator",
            "product": "Red Hat 3scale API Management Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhacm2/acm-governance-policy-addon-controller-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhacm2/acm-governance-policy-framework-addon-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/acm-volsync-addon-controller-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhacm2/config-policy-controller-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhacm2/governance-policy-propagator-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/klusterlet-addon-controller-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhacm2/thanos-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "advanced-cluster-security/rhacs-main-rhel8",
            "product": "Red Hat Advanced Cluster Security 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "advanced-cluster-security/rhacs-main-rhel9",
            "product": "Red Hat Advanced Cluster Security 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "ansible-automation-platform/platform-operator-bundle",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "automation-gateway-proxy",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "automation-gateway-proxy-openssl30",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "automation-gateway-proxy-openssl32",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "python3.11-galaxy-ng",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "python3.11-grpcio",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "python3.12-galaxy-ng",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "python3.12-grpcio",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "python3x-grpcio",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "python-grpcio",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ceph_storage:5"
            ],
            "defaultStatus": "affected",
            "packageName": "rhceph/snmp-notifier-rhel8",
            "product": "Red Hat Ceph Storage 5",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ceph_storage:6"
            ],
            "defaultStatus": "affected",
            "packageName": "rhceph/snmp-notifier-rhel9",
            "product": "Red Hat Ceph Storage 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ceph_storage:7"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhceph/grafana-rhel9",
            "product": "Red Hat Ceph Storage 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ceph_storage:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhceph/grafana-rhel9",
            "product": "Red Hat Ceph Storage 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ceph_storage:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhceph/alloy-rhel10",
            "product": "Red Hat Ceph Storage 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:connectivity_link:1"
            ],
            "defaultStatus": "affected",
            "packageName": "rhcl-1/authorino-rhel9",
            "product": "Red Hat Connectivity Link 1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:connectivity_link:1"
            ],
            "defaultStatus": "affected",
            "packageName": "rhcl-1/coredns-rhel9",
            "product": "Red Hat Connectivity Link 1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-ui-rhel9",
            "product": "Red Hat Edge Manager 1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "buildah",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "butane",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "conmon",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "delve",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "git-lfs",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "grafana-pcp",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "gvisor-tap-vsock",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "ignition",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "image-builder",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "osbuild-composer",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "podman",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhel10/bootc-image-builder",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhel10-eus/rhel-10.0-bootc-image-builder",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "skopeo",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "toolbox",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "trustee",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "trustee-guest-components",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:7"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:7"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhc-worker-script",
            "product": "Red Hat Enterprise Linux 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-tools:rhel8/buildah",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-tools:rhel8/conmon",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-tools:rhel8/containernetworking-plugins",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-tools:rhel8/podman",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-tools:rhel8/runc",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-tools:rhel8/skopeo",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-tools:rhel8/toolbox",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "git-lfs",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "grafana-pcp",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "osbuild-composer",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "weldr-client",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "buildah",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "butane",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "conmon",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "containernetworking-plugins",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "git-lfs",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "grafana-pcp",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "gvisor-tap-vsock",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "ignition",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "image-builder",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "osbuild-composer",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "podman",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhel9/bootc-image-builder",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhel9-eus/rhel-9.6-bootc-image-builder",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "runc",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "toolbox",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "trustee-guest-components",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "weldr-client",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-rhel8-operator",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/rhai-cli-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_cluster_manager_cli:1"
            ],
            "defaultStatus": "affected",
            "packageName": "ocm-cli-clients/ocm-cli-rhel9",
            "product": "Red Hat OpenShift Cluster Manager CLI",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "conmon",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "conmon-rs",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "containernetworking-plugins",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "cri-o",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "cri-tools",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "golang-github-prometheus-promu",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "ignition",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "kata-containers",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "microshift",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/frr-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-ansible-operator",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-cli",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-hypershift-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-clients",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-kuryr",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "ose-aws-ecr-image-credential-provider",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "ose-azure-acr-image-credential-provider",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "ose-crio-credential-provider",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "ose-gcp-gcr-image-credential-provider",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "podman",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "rh-osbs/openshift-golang-builder",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "runc",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "skopeo",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "odf4/cephcsi-rhel9",
            "product": "Red Hat Openshift Data Foundation 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_devspaces:3"
            ],
            "defaultStatus": "unaffected",
            "packageName": "devspaces/udi-rhel9",
            "product": "Red Hat OpenShift Dev Spaces",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:devworkspace"
            ],
            "defaultStatus": "affected",
            "packageName": "devworkspace/devworkspace-rhel9-operator",
            "product": "Red Hat OpenShift Dev Workspaces Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_distributed_tracing:3"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhosdt/tempo-rhel9",
            "product": "Red Hat OpenShift distributed tracing 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:windows_machine_config"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4-wincw/windows-machine-config-rhel9-operator",
            "product": "Red Hat OpenShift for Windows Containers",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_gitops:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-gitops-1/dex-rhel8",
            "product": "Red Hat OpenShift GitOps",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_gitops:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-gitops-1/dex-rhel9",
            "product": "Red Hat OpenShift GitOps",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_service_on_aws:1"
            ],
            "defaultStatus": "affected",
            "packageName": "rosa",
            "product": "Red Hat OpenShift on AWS",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-native-virtualization/kubevirt-apiserver-proxy-rhel9",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-native-virtualization/kubevirt-redfish-rhel9",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "kubevirt",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "affected",
            "packageName": "rh-osbs/openshift-golang-builder",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:16.2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "etcd",
            "product": "Red Hat OpenStack Platform 16.2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:16.2"
            ],
            "defaultStatus": "affected",
            "packageName": "golang-github-infrawatch-apputils",
            "product": "Red Hat OpenStack Platform 16.2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1"
            ],
            "defaultStatus": "affected",
            "packageName": "collectd-libpod-stats",
            "product": "Red Hat OpenStack Platform 17.1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "etcd",
            "product": "Red Hat OpenStack Platform 17.1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1"
            ],
            "defaultStatus": "affected",
            "packageName": "golang-github-infrawatch-apputils",
            "product": "Red Hat OpenStack Platform 17.1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosp-rhel9/osp-director-agent",
            "product": "Red Hat OpenStack Platform 17.1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:18.0"
            ],
            "defaultStatus": "affected",
            "packageName": "golang-github-openstack-k8s-operators-os-diff",
            "product": "Red Hat OpenStack Platform 18.0",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:18.0"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoso-operators/sg-core-rhel9",
            "product": "Red Hat OpenStack Platform 18.0",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:quay:3"
            ],
            "defaultStatus": "unaffected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:quay:3"
            ],
            "defaultStatus": "unaffected",
            "packageName": "quay/quay-rhel9",
            "product": "Red Hat Quay 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6"
            ],
            "defaultStatus": "affected",
            "packageName": "satellite:el8/yggdrasil-worker-forwarder",
            "product": "Red Hat Satellite 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6"
            ],
            "defaultStatus": "unaffected",
            "packageName": "satellite/iop-vmaas-rhel9",
            "product": "Red Hat Satellite 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_interconnect:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "skupper-cli",
            "product": "Red Hat Service Interconnect 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_security_profiles_operator:1"
            ],
            "defaultStatus": "affected",
            "packageName": "compliance/openshift-selinuxd-rhel8",
            "product": "Security Profiles Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:stf:1.5"
            ],
            "defaultStatus": "unaffected",
            "packageName": "stf/sg-core-rhel9",
            "product": "Service Telemetry Framework 1.5",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:amq_streams:2"
            ],
            "defaultStatus": "affected",
            "packageName": "golang-github-danielqsj-kafka_exporter",
            "product": "streams for Apache Kafka 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:zero_trust_workload_identity_manager:1"
            ],
            "defaultStatus": "affected",
            "packageName": "zero-trust-workload-identity-manager/spiffe-csi-driver-rhel9",
            "product": "Zero Trust Workload Identity Manager",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:zero_trust_workload_identity_manager:0"
            ],
            "defaultStatus": "affected",
            "packageName": "zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9",
            "product": "Zero Trust Workload Identity Manager - Tech Preview",
            "vendor": "Red Hat"
          }
        ],
        "datePublic": "2026-06-02T22:01:36.954Z",
        "descriptions": [
          {
            "lang": "en",
            "value": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates."
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "namespace": "https://access.redhat.com/security/updates/classification/",
                "value": "Important"
              },
              "type": "Red Hat severity rating"
            }
          },
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            },
            "format": "CVSS"
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-606",
                "description": "Unchecked Input for Loop Condition",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-18T12:04:41.189Z",
          "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
          "shortName": "redhat-SADP"
        },
        "references": [
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2026-27145"
          },
          {
            "name": "RHBZ#2484207",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
          },
          {
            "tags": [
              "x_sadp-csaf-vex"
            ],
            "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27145.json"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42079"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42080"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:68334"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:68335"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:53416"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:50319"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54757"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57482"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42082"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42150"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42151"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42240"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:49703"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:49702"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:53413"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:53374"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54168"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:51187"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:46394"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:46395"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:29980"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:35832"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34357"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:39005"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42946"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:39573"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:38995"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41930"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:61253"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60354"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57649"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:53412"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60315"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:49712"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:53415"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54401"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:29981"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34359"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:39879"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36317"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54531"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:61314"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54500"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41030"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:44622"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:47149"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:53530"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:52946"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:66022"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:51057"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60387"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:47737"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60390"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60388"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54427"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60391"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60386"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:63016"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42142"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33574"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:23262"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:23264"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54441"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42644"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36648"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41036"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60025"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57488"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54603"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:49705"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:49729"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:49744"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:49765"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:49770"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:50205"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36797"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42043"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42047"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42050"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42051"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42049"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:55899"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54435"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54525"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57194"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:59556"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:59593"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:59557"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54432"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:59579"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:59558"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:47735"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:59559"
          }
        ],
        "solutions": [
          {
            "lang": "en",
            "value": "RHSA-2026:42079: Red Hat Ansible Automation Platform 2.6 for RHEL 10, Red Hat Ansible Automation Platform 2.6 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42080: Red Hat Ansible Automation Platform 2.7 for RHEL 10, Red Hat Ansible Automation Platform 2.7 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:68334: RHEM 1.1 for RHEL 10, RHEM 1.1 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:68335: RHEM 1.2 for RHEL 10, RHEM 1.2 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:53416: Red Hat Enterprise Linux Server (v. 7 ELS)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:50319: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54757: Red Hat OpenStack Platform 16.2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57482: Red Hat OpenShift Container Platform 4.18"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42082: Red Hat Satellite 6.16 for RHEL 8, Red Hat Satellite 6.16 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42150: Red Hat Satellite 6.17 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42151: Red Hat Satellite 6.18 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42240: Red Hat Satellite 6.19 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:49703: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:49702: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:53413: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:53374: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54168: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:51187: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:46394: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:46395: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:29980: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:35832: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34357: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:39005: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42946: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:39573: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:38995: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41930: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:61253: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60354: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57649: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:53412: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60315: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:49712: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:53415: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54401: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:29981: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34359: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:39879: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36317: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54531: Cert Manager support for Red Hat OpenShift release 1.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:61314: Cluster Observability Operator 1.5.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54500: Compliance Operator 1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41030: Multicluster Global Hub 1.4.5"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:44622: Multicluster Global Hub 1.6.5"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:47149: Multicluster Global Hub 1.7.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:53530: Multicluster Global Hub 1.7.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:52946: Multicluster Global Hub 1.8.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:66022: OpenShift API for Data Protection 1.5"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:51057: OpenShift Developer Tools and Services 1.6.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60387: Red Hat Advanced Cluster Management for Kubernetes 2.11"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:47737: Red Hat Advanced Cluster Management for Kubernetes 2.13"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60390: Red Hat Advanced Cluster Management for Kubernetes 2.13"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60388: Red Hat Advanced Cluster Management for Kubernetes 2.14"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54427: Red Hat Advanced Cluster Management for Kubernetes 2.15"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60391: Red Hat Advanced Cluster Management for Kubernetes 2.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60386: Red Hat Advanced Cluster Management for Kubernetes 2.17"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:63016: Red Hat Advanced Cluster Management for Kubernetes 2.17"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42142: Red Hat Ansible Automation Platform 2.7"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33574: Red Hat Developer Hub 1.9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:23262: Red Hat Hardened Images"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:23264: Red Hat Hardened Images"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54441: Red Hat Lightspeed (formerly Insights) for Runtimes 1.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42644: Red Hat OpenShift AI 2.25"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36648: Red Hat OpenShift Builds 1.7.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41036: Red Hat OpenShift Builds 1.8.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60025: Red Hat OpenShift Container Platform 4.17"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57488: Red Hat OpenShift Container Platform 4.18"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54603: Red Hat OpenShift Container Platform 4.21"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:49705: Red Hat OpenShift Service Mesh 3.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:49729: Red Hat OpenShift Service Mesh 3.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:49744: Red Hat OpenShift Service Mesh 3.2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:49765: Red Hat OpenShift Service Mesh 3.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:49770: Red Hat OpenShift Service Mesh 3.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:50205: Red Hat OpenShift distributed tracing 3.10.2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36797: Red Hat Trusted Artifact Signer 1.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42043: Red Hat Web Terminal 1.11"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42047: Red Hat Web Terminal 1.12"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42050: Red Hat Web Terminal 1.13"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42051: Red Hat Web Terminal 1.14"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42049: Red Hat Web Terminal 1.15"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:55899: Red Hat Web Terminal 1.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54435: Streams for Apache Kafka 3.2.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54525: external secrets operator for Red Hat OpenShift 1.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57194: multicluster engine for Kubernetes 2.11"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:59556: multicluster engine for Kubernetes 2.11"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:59593: multicluster engine for Kubernetes 2.17"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:59557: multicluster engine for Kubernetes 2.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54432: multicluster engine for Kubernetes 2.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:59579: multicluster engine for Kubernetes 2.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:59558: multicluster engine for Kubernetes 2.8"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:47735: multicluster engine for Kubernetes 2.8"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:59559: multicluster engine for Kubernetes 2.9"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-06-02T23:01:08.992Z",
            "value": "Reported to Red Hat."
          },
          {
            "lang": "en",
            "time": "2026-06-02T22:01:36.954Z",
            "value": "Made public."
          }
        ],
        "title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
        "workarounds": [
          {
            "lang": "en",
            "value": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037)."
          }
        ],
        "x_adpType": "supplier",
        "x_generator": {
          "engine": "sadp-cli 1.0.0"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "crypto/x509",
          "product": "crypto/x509",
          "programRoutines": [
            {
              "name": "HostnameError.Error"
            },
            {
              "name": "matchHostnames"
            },
            {
              "name": "Certificate.Verify"
            },
            {
              "name": "Certificate.VerifyHostname"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.25.11",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.26.4",
              "status": "affected",
              "version": "1.26.0-0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Jakub Ciolek - https://ciolek.dev/"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries. This caused strings.Split(host, \".\") to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically based on the number of SAN entries multiplied by the hostname\u0027s label count. Because x509.Verify validates hostnames before building the certificate chain, this overhead occurred even for untrusted certificates."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-407: Inefficient Algorithmic Complexity",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-02T22:01:36.954Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/cl/783621"
        },
        {
          "url": "https://go.dev/issue/79694"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-5037"
        }
      ],
      "title": "Inefficient candidate hostname parsing in crypto/x509"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-27145",
    "datePublished": "2026-06-02T22:01:36.954Z",
    "dateReserved": "2026-02-17T19:57:28.435Z",
    "dateUpdated": "2026-09-18T12:04:41.189Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-33818 (GCVE-0-2026-33818)

Vulnerability from cvelistv5 – Published: 2026-08-13 21:58 – Updated: 2026-11-07 11:21

Title

Enforce maximum recursion depth in encoding/asn1

Summary

Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-14 15:11 UTC

CWE

CWE-400 - Uncontrolled Resource Consumption

Assigner

Go CNA under the Google root

CNA scorecard E 42/100 over 64 records in the last 180 days details

References

4 references

URL	Tags
https://go.dev/issue/80405
https://groups.google.com/g/golang-announce/c/94p…
https://go.dev/cl/814980
https://pkg.go.dev/vuln/GO-2026-5972

Impacted products

1 product

Vendor	Product	Version
Go standard library	encoding/asn1	Affected: 0 , < 1.25.13 (semver) Affected: 1.26.0-0 , < 1.26.6 (semver) Affected: 1.27.0-0 , < 1.27.0-rc.3 (semver)

Credits

Marwan Atia (marwansamir688@gmail.com)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-33818",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-14T15:11:19.904646Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-400",
                "description": "CWE-400 Uncontrolled Resource Consumption",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-14T15:12:34.877Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "encoding/asn1",
          "product": "encoding/asn1",
          "programRoutines": [
            {
              "name": "parseSequenceOf"
            },
            {
              "name": "parseField"
            },
            {
              "name": "UnmarshalWithParams"
            },
            {
              "name": "Unmarshal"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.25.13",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.26.6",
              "status": "affected",
              "version": "1.26.0-0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.27.0-rc.3",
              "status": "affected",
              "version": "1.27.0-0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Marwan Atia (marwansamir688@gmail.com)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-400: Uncontrolled Resource Consumption",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-07T11:21:24.363Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/issue/80405"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "url": "https://go.dev/cl/814980"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-5972"
        }
      ],
      "title": "Enforce maximum recursion depth in encoding/asn1"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-33818",
    "datePublished": "2026-08-13T21:58:52.821Z",
    "dateReserved": "2026-03-23T20:35:32.815Z",
    "dateUpdated": "2026-11-07T11:21:24.363Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-39821 (GCVE-0-2026-39821)

Vulnerability from cvelistv5 – Published: 2026-05-22 15:01 – Updated: 2026-09-17 12:04

Title

Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna

Summary

The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--example-.com") incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject "example.com" but permit "xn--example-.com". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name "example.com".

Severity

9.6 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

8.2 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-23 03:55 UTC

CWE

CWE-1289 - Improper Validation of Unsafe Equivalence in Input

Assigner

Go CNA under the Google root

CNA scorecard E 42/100 over 64 records in the last 180 days details

References

159 references

URL	Tags
https://go.dev/cl/767220
https://go.dev/issue/78760
https://groups.google.com/g/golang-announce/c/iI-…
https://groups.google.com/g/golang-announce/c/94p…
https://pkg.go.dev/vuln/GO-2026-5026
https://access.redhat.com/security/cve/CVE-2026-39821	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2480756	issue-trackingx_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/v…	x_sadp-csaf-vex
https://access.redhat.com/errata/RHSA-2026:42079	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42080	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41019	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:66350	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54191	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42078	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54757	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54580	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34789	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42082	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36796	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57845	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:62549	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:65851	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42150	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42151	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42240	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:67149	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:49702	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:67517	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:56143	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59546	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:53413	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:63134	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:53374	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:51187	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:30855	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:46395	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:37436	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:35827	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:35826	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:65534	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34357	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:66432	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:39005	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:39573	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:38995	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:30853	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:35830	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:35831	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:66016	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41930	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:68504	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:67319	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:61253	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:67160	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:65359	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:61245	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60354	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57649	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:67159	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59549	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:53412	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59562	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60315	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:67287	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:49712	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:51112	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:56223	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:52826	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:53415	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57541	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54401	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:30854	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:37435	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:35828	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:35829	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:65886	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34359	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:65153	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:39879	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54531	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34342	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36808	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34364	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:56340	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:47952	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:50843	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41030	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:44622	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:47149	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:53530	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:51033	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:66022	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:43692	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60387	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:30651	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:47737	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:26546	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:26547	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36207	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42132	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42142	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36651	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:40945	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:40118	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33531	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33524	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:23262	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:23264	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54441	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41928	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:50300	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:43038	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42644	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:65126	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:60520	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36648	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41036	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36820	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:35994	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:35993	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33155	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33160	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33163	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33173	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33183	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54287	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54284	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54286	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54285	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54274	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54283	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:44624	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:56431	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:37387	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41031	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42146	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:43052	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42796	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41066	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54395	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:40262	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:51341	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:51194	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36797	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42043	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42047	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42050	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42051	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42049	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42048	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42852	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54435	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57194	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36105	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36167	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:41055	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:47735	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:30650	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36883	vendor-advisoryx_refsource_REDHAT

Impacted products

317 products

Vendor	Product	Version
Go standard library	net/http	Affected: 0 , < 1.25.13 (semver) Affected: 1.26.0-0 , < 1.26.6 (semver) Affected: 1.27.0-0 , < 1.27.0-rc.3 (semver)
Go standard library	net/http/internal/http2	Affected: 0 , < 1.25.13 (semver) Affected: 1.26.0-0 , < 1.26.6 (semver) Affected: 1.27.0-0 , < 1.27.0-rc.3 (semver)
golang.org/x/net	golang.org/x/net/idna	Affected: 0 , < 0.55.0 (semver)
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 8	Unaffected: 0:1.6.6-1.el8ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.5::el8
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 9	Unaffected: 0:1.6.6-1.el9ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.5::el9
Red Hat	Red Hat Ansible Automation Platform 2.6 for RHEL 10	Unaffected: 0:1.6.6-1.el10ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.6::el10
Red Hat	Red Hat Ansible Automation Platform 2.6 for RHEL 9	Unaffected: 0:1.6.6-1.el9ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.6::el9
Red Hat	Red Hat Ansible Automation Platform 2.7 for RHEL 10	Unaffected: 0:1.6.6-1.el10ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.7::el10
Red Hat	Red Hat Ansible Automation Platform 2.7 for RHEL 9	Unaffected: 0:1.6.6-1.el9ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.7::el9
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:3.7.1-5.el10_2.5 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:0.152.1-1.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:5.3.0-7.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:10.2.6-27.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:1.26.5-1.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 1:0.3.8-6.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:0.4.9.2-1.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:1.0.1-2.el10_2.3 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:52.1-1.el10_2.2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:165.1-5.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:1.26.5-1.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:0.4.7-5.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 1:0.3.2-5.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:0.152.1-1.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:5.3.0-1.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:2.21.0-2.el10_0.3 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:134.1-10.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:3.6.1-2.el10_0.7 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:10.2.6-26.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 7 Extended Lifecycle Support	Unaffected: 0:0.11-1.el7_9 , < * (rpm) cpe:/o:redhat:rhel_els:7
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:3.4.1-11.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:9.2.10-31.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:5.1.1-16.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 8100020260710105056.a3795dee , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 1:0.2.5-9.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:101.5-2.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:3.7.1-4.el9_8.1 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:0.152.1-1.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:10.2.6-23.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:5.1.1-17.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:1.26.5-1.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 1:0.2.7-8.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:165.1-4.el9_8.1 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:52.1-1.el9_8.2 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 1:0.2.2-1.el9_2.4 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 0:76.1-7.el9_2 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 0:1.26.5-1.el9_2 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 0:2.15.0-2.el9_2.1 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 0:5.1.1-5.el9_2.2 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 0:3.2.0-2.el9_2.10 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	Unaffected: 0:0.152.1-1.el9_4 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.4
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	Unaffected: 0:1.26.5-1.el9_4 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.4
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	Unaffected: 0:2.17.0-2.el9_4.1 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.4
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	Unaffected: 0:101.3-4.el9_4.5 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.4
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	Unaffected: 1:0.2.4-9.el9_4 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.4
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	Unaffected: 0:5.1.1-9.el9_4 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.4
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 0:1.26.5-1.el9_6 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 0:10.2.6-22.el9_6 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 0:2.21.0-7.el9_6 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 0:0.152.1-1.el9_6 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 1:0.2.7-1.el9_6.5 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 0:5.1.1-15.el9_6 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 0:132.2-10.el9_6 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 0:3.6.1-2.el9_6.7 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat OpenShift Container Platform 4.16	Unaffected: 0:4.16.69-202608202336.p0.g763478c.assembly.4.16.69.el9 , < * (rpm) cpe:/a:redhat:openshift:4.16::el9
Red Hat	Red Hat OpenShift Container Platform 4.16	Unaffected: 416.94.202609011112-0 , < * (rpm) cpe:/a:redhat:openshift:4.16::el9
Red Hat	Red Hat OpenShift Container Platform 4.20	Unaffected: 0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8 , < * (rpm) cpe:/a:redhat:openshift:4.20::el8
Red Hat	Red Hat OpenShift Container Platform 4.21	Unaffected: 0:4.21.0-202609021357.p2.g83d4961.assembly.stream.el10 , < * (rpm) cpe:/a:redhat:openshift:4.21::el8
Red Hat	Red Hat OpenShift Container Platform 4.22	Unaffected: 0:4.22.0-202606291123.p2.ga17a3e3.assembly.stream.el8 , < * (rpm) cpe:/a:redhat:openshift:4.22::el8
Red Hat	Red Hat OpenStack Platform 16.2	Unaffected: 0:3.3.23-22.el8ost , < * (rpm) cpe:/a:redhat:openstack:16.2::el8
Red Hat	Red Hat Satellite 6.16 for RHEL 8	Unaffected: 0:0.0.4-1.el8sat , < * (rpm) cpe:/a:redhat:satellite:6.16::el8
Red Hat	Red Hat Satellite 6.16 for RHEL 9	Unaffected: 0:0.0.4-1.el9sat , < * (rpm) cpe:/a:redhat:satellite:6.16::el9
Red Hat	Red Hat Satellite 6.17 for RHEL 9	Unaffected: 0:0.0.4-1.el9sat , < * (rpm) cpe:/a:redhat:satellite:6.17::el9
Red Hat	Red Hat Satellite 6.18 for RHEL 9	Unaffected: 0:0.0.4-1.el9sat , < * (rpm) cpe:/a:redhat:satellite:6.18::el9
Red Hat	Red Hat Satellite 6.19 for RHEL 9	Unaffected: 0:0.0.4-1.el9sat , < * (rpm) cpe:/a:redhat:satellite:6.19::el9
Red Hat	RHEM 1.0 for RHEL 9	Unaffected: 0:1.0.3-1.el9em , < * (rpm) cpe:/a:redhat:edge_manager:1.0::el9
Red Hat	RHEM 1.1 for RHEL 10	Unaffected: 0:1.1.3-1.el10em , < * (rpm) cpe:/a:redhat:edge_manager:1.1::el10
Red Hat	RHEM 1.1 for RHEL 9	Unaffected: 0:1.1.3-1.el9em , < * (rpm) cpe:/a:redhat:edge_manager:1.1::el9
Red Hat	Streams for Apache Kafka 3.2.1	Unaffected: danielqsj-kafka_exporter , < * (rpm) cpe:/a:redhat:amq_streams:3.2::el9
Red Hat	Cert Manager support for Red Hat OpenShift release 1.19	Unaffected: 1786613805 , < * (rpm) cpe:/a:redhat:cert_manager:1.19::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782840519 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782839981 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782839193 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782838753 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782839279 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782840539 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782844225 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782839658 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782838476 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	DevWorkspace Operator 0.42	Unaffected: 1782401674 , < * (rpm) cpe:/a:redhat:devworkspace:0.42::el9
Red Hat	Logging for Red Hat OpenShift 6	Unaffected: 1785418851 , < * (rpm) cpe:/a:redhat:logging:6.0::el9
Red Hat	Logging for Red Hat OpenShift 6.2	Unaffected: 1784747813 , < * (rpm) cpe:/a:redhat:logging:6.2::el9
Red Hat	Logging Subsystem for Red Hat OpenShift 6.4	Unaffected: 1782408807 , < * (rpm) cpe:/a:redhat:logging:6.4::el9
Red Hat	Logging Subsystem for Red Hat OpenShift 6.5	Unaffected: 1786645107 , < * (rpm) cpe:/a:redhat:logging:6.5::el9
Red Hat	multicluster engine for Kubernetes 2.11	Unaffected: 1786912006 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.11::el9
Red Hat	multicluster engine for Kubernetes 2.6	Unaffected: 1783332008 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.6::el8
Red Hat	multicluster engine for Kubernetes 2.6	Unaffected: 1783333268 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.6::el9
Red Hat	multicluster engine for Kubernetes 2.6	Unaffected: 1783985999 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.6::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1782477094 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1782308518 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1784737366 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.8	Unaffected: 1784306906 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat	multicluster engine for Kubernetes 2.9	Unaffected: 1783260894 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.9::el9
Red Hat	Multicluster Global Hub 1.4.5	Unaffected: 1784061472 , < * (rpm) cpe:/a:redhat:multicluster_globalhub:1.4::el9
Red Hat	Multicluster Global Hub 1.6.5	Unaffected: 1784152046 , < * (rpm) cpe:/a:redhat:multicluster_globalhub:1.6::el9
Red Hat	Multicluster Global Hub 1.7.0	Unaffected: 1784768332 , < * (rpm) Unaffected: 1785775948 , < * (rpm) cpe:/a:redhat:multicluster_globalhub:1.7::el9
Red Hat	OpenShift API for Data Protection 1.3	Unaffected: 1785180878 , < * (rpm) cpe:/a:redhat:openshift_api_data_protection:1.3::el9
Red Hat	OpenShift API for Data Protection 1.5	Unaffected: 1788860461 , < * (rpm) cpe:/a:redhat:openshift_api_data_protection:1.5::el9
Red Hat	OpenShift API for Data Protection 1.6	Unaffected: 1784058822 , < * (rpm) cpe:/a:redhat:openshift_api_data_protection:1.6::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.11	Unaffected: 1787685239 , < * (rpm) cpe:/a:redhat:acm:2.11::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1782383730 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1782156698 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1782157632 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1782157829 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1782157630 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1782382580 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1782383255 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1782488873 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1782157507 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1782396604 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1782382711 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1782157546 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1782157471 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1782157018 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1782156920 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1782374537 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1782383676 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1782156860 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1782465412 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1784652040 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1784638644 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2.13	Unaffected: 1784740143 , < * (rpm) cpe:/a:redhat:acm:2.13::el9
Red Hat	Red Hat Advanced Cluster Security 4.9	Unaffected: 1781686446 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.9::el8
Red Hat	Red Hat Advanced Cluster Security for Kubernetes 4.10	Unaffected: 1781686458 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.10::el8
Red Hat	Red Hat Advanced Cluster Security for Kubernetes 4.11	Unaffected: 1783352589 , < * (rpm) cpe:/a:redhat:advanced_cluster_security:4.11::el9
Red Hat	Red Hat Ansible Automation Platform 2.6	Unaffected: 1783962464 , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.6::el9
Red Hat	Red Hat Ansible Automation Platform 2.7	Unaffected: 1783917963 , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.7::el9
Red Hat	Red Hat Edge Manager 1.0	Unaffected: 1783502438 , < * (rpm) cpe:/a:redhat:edge_manager:1.0::el9
Red Hat	Red Hat Edge Manager 1.1	Unaffected: 1784194574 , < * (rpm) cpe:/a:redhat:edge_manager:1.1::el10
Red Hat	Red Hat Edge Manager 1.1	Unaffected: 1784127736 , < * (rpm) cpe:/a:redhat:edge_manager:1.1::el9
Red Hat	Red Hat Enterprise Linux AI 3.4	Unaffected: 1782804957 , < * (rpm) cpe:/a:redhat:enterprise_linux_ai:3.4::el9
Red Hat	Red Hat Enterprise Linux AI 3.4	Unaffected: 1782758407 , < * (rpm) cpe:/a:redhat:enterprise_linux_ai:3.4::el9
Red Hat	Red Hat Enterprise Linux AI 3.4	Unaffected: 1782758410 , < * (rpm) cpe:/a:redhat:enterprise_linux_ai:3.4::el9
Red Hat	Red Hat Enterprise Linux AI 3.4	Unaffected: 1782754093 , < * (rpm) cpe:/a:redhat:enterprise_linux_ai:3.4::el9
Red Hat	Red Hat Enterprise Linux AI 3.4	Unaffected: 1782744816 , < * (rpm) cpe:/a:redhat:enterprise_linux_ai:3.4::el9
Red Hat	Red Hat Enterprise Linux AI 3.4	Unaffected: 1782758409 , < * (rpm) cpe:/a:redhat:enterprise_linux_ai:3.4::el9
Red Hat	Red Hat Enterprise Linux AI 3.4	Unaffected: 1782744830 , < * (rpm) cpe:/a:redhat:enterprise_linux_ai:3.4::el9
Red Hat	Red Hat Hardened Images	Unaffected: 1.25.11-2.hum1 , < * (rpm) cpe:/a:redhat:hummingbird:1
Red Hat	Red Hat Hardened Images	Unaffected: 1.26.4-2.hum1 , < * (rpm) cpe:/a:redhat:hummingbird:1
Red Hat	Red Hat Lightspeed (formerly Insights) for Runtimes 1.0	Unaffected: 1786483782 , < * (rpm) cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9
Red Hat	Red Hat Migration Toolkit 1.8	Unaffected: 1783953372 , < * (rpm) cpe:/a:redhat:rhmt:1.8::el8
Red Hat	Red Hat Migration Toolkit for Applications 8.1	Unaffected: 1785171639 , < * (rpm) cpe:/a:redhat:migration_toolkit_applications:8.1::el9
Red Hat	Red Hat Migration Toolkit for Applications 8.2	Unaffected: 1784211378 , < * (rpm) cpe:/a:redhat:migration_toolkit_applications:8.2::el9
Red Hat	Red Hat multicluster global hub 1.5.3	Unaffected: 1784127491 , < * (rpm) cpe:/a:redhat:multicluster_globalhub:1.5::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1783544461 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1784004914 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1783946386 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1788312157 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1787330073 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787051722 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787102977 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1786630755 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1786630724 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1786630124 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1786611780 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1786612055 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787153683 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787088234 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787250508 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787251550 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1786611759 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787251250 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1786612219 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787250617 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787090180 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787089049 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1787361677 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift Builds 1.7.3	Unaffected: 1783057515 , < * (rpm) cpe:/a:redhat:openshift_builds:1.7::el9
Red Hat	Red Hat OpenShift Builds 1.7.3	Unaffected: 1783057868 , < * (rpm) cpe:/a:redhat:openshift_builds:1.7::el9
Red Hat	Red Hat OpenShift Builds 1.8.1	Unaffected: 1784121108 , < * (rpm) cpe:/a:redhat:openshift_builds:1.8::el9
Red Hat	Red Hat OpenShift Builds 1.8.1	Unaffected: 1783612119 , < * (rpm) cpe:/a:redhat:openshift_builds:1.8::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786705347 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706101 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786705558 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786705646 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706138 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786705741 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786705777 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786705802 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786705938 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706577 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706125 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706177 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706188 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706679 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706357 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706612 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706644 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706659 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.18	Unaffected: 1786706880 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782932114 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782931768 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782932104 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783536000 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783535989 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783536515 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782932521 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783018461 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783018421 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782932812 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783537001 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782932919 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783537586 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782932969 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782933015 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782933042 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783537392 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782933235 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782933251 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783537955 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782933417 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783537742 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782933602 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1783019377 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782934054 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782934036 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	Unaffected: 1782934284 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat OpenShift Dev Spaces 3.29	Unaffected: 1782991491 , < * (rpm) cpe:/a:redhat:openshift_devspaces:3.29::el9
Red Hat	Red Hat OpenShift distributed tracing 3.10.2	Unaffected: 1784775772 , < * (rpm) cpe:/a:redhat:openshift_distributed_tracing:3.10::el9
Red Hat	Red Hat OpenShift distributed tracing 3.10.2	Unaffected: 1784775770 , < * (rpm) cpe:/a:redhat:openshift_distributed_tracing:3.10::el9
Red Hat	Red Hat OpenShift distributed tracing 3.10.2	Unaffected: 1784775834 , < * (rpm) cpe:/a:redhat:openshift_distributed_tracing:3.10::el9
Red Hat	Red Hat OpenShift distributed tracing 3.10.2	Unaffected: 1784777166 , < * (rpm) cpe:/a:redhat:openshift_distributed_tracing:3.10::el9
Red Hat	Red Hat OpenShift distributed tracing 3.10.2	Unaffected: 1784775793 , < * (rpm) cpe:/a:redhat:openshift_distributed_tracing:3.10::el9
Red Hat	Red Hat OpenShift distributed tracing 3.10.2	Unaffected: 1784775768 , < * (rpm) cpe:/a:redhat:openshift_distributed_tracing:3.10::el9
Red Hat	Red Hat OpenShift distributed tracing 3.10.2	Unaffected: 1784775782 , < * (rpm) cpe:/a:redhat:openshift_distributed_tracing:3.10::el9
Red Hat	Red Hat OpenShift GitOps 1.19	Unaffected: 1782292352 , < * (rpm) cpe:/a:redhat:openshift_gitops:1.19::el8
Red Hat	Red Hat OpenShift GitOps 1.20	Unaffected: 1782383826 , < * (rpm) cpe:/a:redhat:openshift_gitops:1.20::el9
Red Hat	Red Hat OpenShift Service Mesh 2.6	Unaffected: 1782287580 , < * (rpm) cpe:/a:redhat:service_mesh:2.6::el8
Red Hat	Red Hat OpenShift Service Mesh 3.0	Unaffected: 1782201833 , < * (rpm) cpe:/a:redhat:service_mesh:3.0::el9
Red Hat	Red Hat OpenShift Service Mesh 3.1	Unaffected: 1782201537 , < * (rpm) cpe:/a:redhat:service_mesh:3.1::el9
Red Hat	Red Hat OpenShift Service Mesh 3.2	Unaffected: 1782201812 , < * (rpm) cpe:/a:redhat:service_mesh:3.2::el9
Red Hat	Red Hat OpenShift Service Mesh 3.3	Unaffected: 1782201466 , < * (rpm) cpe:/a:redhat:service_mesh:3.3::el9
Red Hat	Red Hat OpenShift Workload Availability 0.12	Unaffected: 1785202723 , < * (rpm) cpe:/a:redhat:workload_availability_nhc:0.12::el9
Red Hat	Red Hat OpenShift Workload Availability 0.13	Unaffected: 1785203036 , < * (rpm) cpe:/a:redhat:workload_availability_snr:0.13::el9
Red Hat	Red Hat OpenShift Workload Availability 0.3	Unaffected: 1785203474 , < * (rpm) cpe:/a:redhat:workload_availability_sbr:0.3::el9
Red Hat	Red Hat OpenShift Workload Availability 0.7	Unaffected: 1785203508 , < * (rpm) cpe:/a:redhat:workload_availability_mdr:0.7::el9
Red Hat	Red Hat OpenShift Workload Availability 0.8	Unaffected: 1785203079 , < * (rpm) cpe:/a:redhat:workload_availability_far:0.8::el9
Red Hat	Red Hat OpenShift Workload Availability 5.7	Unaffected: 1785202847 , < * (rpm) cpe:/a:redhat:workload_availability_nmo:5.7::el9
Red Hat	Red Hat Quay 3.10	Unaffected: 1783750447 , < * (rpm) cpe:/a:redhat:quay:3.10::el8
Red Hat	Red Hat Quay 3.12	Unaffected: 1783751865 , < * (rpm) Unaffected: 1784353904 , < * (rpm) cpe:/a:redhat:quay:3.12::el8
Red Hat	Red Hat Quay 3.15	Unaffected: 1784351966 , < * (rpm) cpe:/a:redhat:quay:3.15::el8
Red Hat	Red Hat Quay 3.16	Unaffected: 1783955846 , < * (rpm) cpe:/a:redhat:quay:3.16::el9
Red Hat	Red Hat Quay 3.17	Unaffected: 1786181981 , < * (rpm) cpe:/a:redhat:quay:3.17::el9
Red Hat	Red Hat Quay 3.9	Unaffected: 1784125838 , < * (rpm) cpe:/a:redhat:quay:3.9::el8
Red Hat	Red Hat Satellite 6.18	Unaffected: 1785923308 , < * (rpm) cpe:/a:redhat:satellite:6.18::el9
Red Hat	Red Hat Satellite 6.19	Unaffected: 1785929994 , < * (rpm) cpe:/a:redhat:satellite:6.19::el9
Red Hat	Red Hat Trusted Artifact Signer 1.4	Unaffected: 4-1.4.2 , < * (rpm) Unaffected: 4-1.4.3 , < * (rpm) cpe:/a:redhat:trusted_artifact_signer:1.4::el9
Red Hat	Red Hat Web Terminal 1.11	Unaffected: 1784296203 , < * (rpm) cpe:/a:redhat:webterminal:1.11::el9
Red Hat	Red Hat Web Terminal 1.12	Unaffected: 1784247610 , < * (rpm) cpe:/a:redhat:webterminal:1.12::el9
Red Hat	Red Hat Web Terminal 1.13	Unaffected: 1784296127 , < * (rpm) cpe:/a:redhat:webterminal:1.13::el9
Red Hat	Red Hat Web Terminal 1.14	Unaffected: 1784296114 , < * (rpm) cpe:/a:redhat:webterminal:1.14::el9
Red Hat	Red Hat Web Terminal 1.15	Unaffected: 1784296033 , < * (rpm) cpe:/a:redhat:webterminal:1.15::el9
Red Hat	Red Hat Web Terminal 1.16	Unaffected: 1784295767 , < * (rpm) cpe:/a:redhat:webterminal:1.16::el9
Red Hat	Assisted Installer for Red Hat OpenShift Container Platform 2	cpe:/a:redhat:assisted_installer:2
Red Hat	Compliance Operator	cpe:/a:redhat:openshift_compliance_operator:1
Red Hat	Confidential Compute Attestation	cpe:/a:redhat:confidential_compute_attestation:1
Red Hat	Cryostat 4	cpe:/a:redhat:cryostat:4
Red Hat	Deployment Validation Operator	cpe:/a:redhat:deployment_validator_operator
Red Hat	ExternalDNS Operator	cpe:/a:redhat:ext_dns_optr:1
Red Hat	External Secrets Operator for Red Hat OpenShift	cpe:/a:redhat:external_secrets_operator:1
Red Hat	Fence Agents Remediation Operator	cpe:/a:redhat:workload_availability_far:0
Red Hat	File Integrity Operator	cpe:/a:redhat:openshift_file_integrity_operator:1
Red Hat	Gatekeeper 3	cpe:/a:redhat:gatekeeper:3
Red Hat	Logical Volume Manager Storage	cpe:/a:redhat:lvms:4 cpe:/a:redhat:lvms:5
Red Hat	Logical Volume Manager Storage	cpe:/a:redhat:lvms:4
Red Hat	Machine Deletion Remediation Operator	cpe:/a:redhat:workload_availability_mdr:0
Red Hat	Multiarch Tuning Operator	cpe:/a:redhat:multiarch_tuning_operator
Red Hat	Multicluster Engine for Kubernetes	cpe:/a:redhat:multicluster_engine
Red Hat	Network Observability Operator	cpe:/a:redhat:network_observ_optr:1
Red Hat	Node HealthCheck Operator	cpe:/a:redhat:workload_availability_nhc:0
Red Hat	OpenShift API for Data Protection	cpe:/a:redhat:openshift_api_data_protection:1
Red Hat	OpenShift Developer Tools and Services	cpe:/a:redhat:ocp_tools
Red Hat	OpenShift Lightspeed	cpe:/a:redhat:openshift_lightspeed
Red Hat	OpenShift Pipelines	cpe:/a:redhat:openshift_pipelines:1
Red Hat	OpenShift Serverless	cpe:/a:redhat:serverless:1
Red Hat	Power monitoring for Red Hat OpenShift	cpe:/a:redhat:openshift_power_monitoring
Red Hat	Red Hat 3scale API Management Platform 2	cpe:/a:redhat:red_hat_3scale_amp:2
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2	cpe:/a:redhat:acm:2
Red Hat	Red Hat Ansible Automation Platform 2	cpe:/a:redhat:ansible_automation_platform:2
Red Hat	Red Hat Ceph Storage 5	cpe:/a:redhat:ceph_storage:5
Red Hat	Red Hat Ceph Storage 6	cpe:/a:redhat:ceph_storage:6
Red Hat	Red Hat Ceph Storage 8	cpe:/a:redhat:ceph_storage:8
Red Hat	Red Hat Ceph Storage 9	cpe:/a:redhat:ceph_storage:9
Red Hat	Red Hat Certification Program for Red Hat Enterprise Linux 9	cpe:/a:redhat:certifications:9
Red Hat	Red Hat Connectivity Link 1	cpe:/a:redhat:connectivity_link:1
Red Hat	Red Hat Developer Hub	cpe:/a:redhat:rhdh:1
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux AI (RHEL AI) 3	cpe:/a:redhat:enterprise_linux_ai:3
Red Hat	Red Hat Hardened Images	cpe:/a:redhat:hummingbird:1
Red Hat	Red Hat OpenShift AI (RHOAI)	cpe:/a:redhat:openshift_ai
Red Hat	Red Hat OpenShift Cluster Manager CLI	cpe:/a:redhat:openshift_cluster_manager_cli:1
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4
Red Hat	Red Hat OpenShift distributed tracing 3	cpe:/a:redhat:openshift_distributed_tracing:3
Red Hat	Red Hat OpenShift for Windows Containers	cpe:/a:redhat:windows_machine_config
Red Hat	Red Hat OpenShift on AWS	cpe:/a:redhat:openshift_service_on_aws:1
Red Hat	Red Hat OpenShift Virtualization 4	cpe:/a:redhat:container_native_virtualization:4
Red Hat	Red Hat OpenStack Platform 16.2	cpe:/a:redhat:openstack:16.2
Red Hat	Red Hat OpenStack Platform 17.1	cpe:/a:redhat:openstack:17.1
Red Hat	Red Hat OpenStack Platform 18.0	cpe:/a:redhat:openstack:18.0
Red Hat	Red Hat Satellite 6	cpe:/a:redhat:satellite:6
Red Hat	Red Hat Service Interconnect 1	cpe:/a:redhat:service_interconnect:1
Red Hat	Red Hat Service Interconnect 2	cpe:/a:redhat:service_interconnect:2
Red Hat	Security Profiles Operator	cpe:/a:redhat:openshift_security_profiles_operator:1
Red Hat	Zero Trust Workload Identity Manager	cpe:/a:redhat:zero_trust_workload_identity_manager:1
Red Hat	Zero Trust Workload Identity Manager - Tech Preview	cpe:/a:redhat:zero_trust_workload_identity_manager:0

Credits

KC1zs4 (https://github.com/KC1zs4) Longwei Wang (https://github.com/gn00295120)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 9.6,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "CHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-39821",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-23T03:55:58.522682Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-1289",
                "description": "CWE-1289 Improper Validation of Unsafe Equivalence in Input",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-27T13:13:15.606Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.5::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "receptor",
            "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.6.6-1.el8ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "receptor",
            "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.6.6-1.el9ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.6::el10"
            ],
            "defaultStatus": "affected",
            "packageName": "receptor",
            "product": "Red Hat Ansible Automation Platform 2.6 for RHEL 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.6.6-1.el10ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "receptor",
            "product": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.6.6-1.el9ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.7::el10"
            ],
            "defaultStatus": "affected",
            "packageName": "receptor",
            "product": "Red Hat Ansible Automation Platform 2.7 for RHEL 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.6.6-1.el10ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "receptor",
            "product": "Red Hat Ansible Automation Platform 2.7 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.6.6-1.el9ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "git-lfs",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:3.7.1-5.el10_2.5",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "opentelemetry-collector",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.152.1-1.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana-pcp",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:5.3.0-7.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:10.2.6-27.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.26.5-1.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:0.3.8-6.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "yggdrasil",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.4.9.2-1.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "go-fdo-server",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.0.1-2.el10_2.3",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "image-builder",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:52.1-1.el10_2.2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "osbuild-composer",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:165.1-5.el10_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.26.5-1.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "yggdrasil",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.4.7-5.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:0.3.2-5.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "opentelemetry-collector",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.152.1-1.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana-pcp",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:5.3.0-1.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "ignition",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:2.21.0-2.el10_0.3",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "osbuild-composer",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:134.1-10.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "git-lfs",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:3.6.1-2.el10_0.7",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux_eus:10.0"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:10.2.6-26.el10_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:rhel_els:7"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc-worker-script",
            "product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.11-1.el7_9",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "git-lfs",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:3.4.1-11.el8_10",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:9.2.10-31.el8_10",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana-pcp",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:5.1.1-16.el8_10",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "go-toolset:rhel8",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "8100020260710105056.a3795dee",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:0.2.5-9.el8_10",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "osbuild-composer",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:101.5-2.el8_10",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "git-lfs",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:3.7.1-4.el9_8.1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "opentelemetry-collector",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.152.1-1.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:10.2.6-23.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana-pcp",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:5.1.1-17.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.26.5-1.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:0.2.7-8.el9_8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "osbuild-composer",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:165.1-4.el9_8.1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "image-builder",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:52.1-1.el9_8.2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:0.2.2-1.el9_2.4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.2"
            ],
            "defaultStatus": "affected",
            "packageName": "osbuild-composer",
            "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:76.1-7.el9_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.2"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.26.5-1.el9_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.2"
            ],
            "defaultStatus": "affected",
            "packageName": "ignition",
            "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:2.15.0-2.el9_2.1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.2"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana-pcp",
            "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:5.1.1-5.el9_2.2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.2"
            ],
            "defaultStatus": "affected",
            "packageName": "git-lfs",
            "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:3.2.0-2.el9_2.10",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "opentelemetry-collector",
            "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.152.1-1.el9_4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.26.5-1.el9_4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "ignition",
            "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:2.17.0-2.el9_4.1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "osbuild-composer",
            "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:101.3-4.el9_4.5",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:0.2.4-9.el9_4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana-pcp",
            "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:5.1.1-9.el9_4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.26.5-1.el9_6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:10.2.6-22.el9_6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "ignition",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:2.21.0-7.el9_6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "opentelemetry-collector",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.152.1-1.el9_6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1:0.2.7-1.el9_6.5",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "grafana-pcp",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:5.1.1-15.el9_6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "osbuild-composer",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:132.2-10.el9_6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "git-lfs",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:3.6.1-2.el9_6.7",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "microshift",
            "product": "Red Hat OpenShift Container Platform 4.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.16.69-202608202336.p0.g763478c.assembly.4.16.69.el9",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhcos",
            "product": "Red Hat OpenShift Container Platform 4.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "416.94.202609011112-0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.20::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-clients",
            "product": "Red Hat OpenShift Container Platform 4.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.20.0-202608101541.p2.g1367d50.assembly.stream.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.21::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "ose-crio-credential-provider",
            "product": "Red Hat OpenShift Container Platform 4.21",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.21.0-202609021357.p2.g83d4961.assembly.stream.el10",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.22::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "ose-azure-acr-image-credential-provider",
            "product": "Red Hat OpenShift Container Platform 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.22.0-202606291123.p2.ga17a3e3.assembly.stream.el8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openstack:16.2::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "etcd",
            "product": "Red Hat OpenStack Platform 16.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:3.3.23-22.el8ost",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.16::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "yggdrasil-worker-forwarder",
            "product": "Red Hat Satellite 6.16 for RHEL 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.0.4-1.el8sat",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "yggdrasil-worker-forwarder",
            "product": "Red Hat Satellite 6.16 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.0.4-1.el9sat",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "yggdrasil-worker-forwarder",
            "product": "Red Hat Satellite 6.17 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.0.4-1.el9sat",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "yggdrasil-worker-forwarder",
            "product": "Red Hat Satellite 6.18 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.0.4-1.el9sat",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "yggdrasil-worker-forwarder",
            "product": "Red Hat Satellite 6.19 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:0.0.4-1.el9sat",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "flightctl",
            "product": "RHEM 1.0 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.0.3-1.el9em",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.1::el10"
            ],
            "defaultStatus": "affected",
            "packageName": "flightctl",
            "product": "RHEM 1.1 for RHEL 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.1.3-1.el10em",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "flightctl",
            "product": "RHEM 1.1 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.1.3-1.el9em",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:amq_streams:3.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "golang-github",
            "product": "Streams for Apache Kafka 3.2.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "danielqsj-kafka_exporter",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cert_manager:1.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cert-manager/jetstack-cert-manager-rhel9",
            "product": "Cert Manager support for Red Hat OpenShift release 1.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786613805",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782840519",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782839981",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782839193",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782838753",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/logging-console-plugin-pf4-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782839279",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/logging-console-plugin-pf5-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782840539",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/monitoring-console-plugin-pf5-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782844225",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/monitoring-console-plugin-pf6-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782839658",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/monitoring-console-plugin-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782838476",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:devworkspace:0.42::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "devworkspace/devworkspace-rhel9-operator",
            "product": "DevWorkspace Operator 0.42",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782401674",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:logging:6.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-logging/eventrouter-rhel9",
            "product": "Logging for Red Hat OpenShift 6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785418851",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:logging:6.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-logging/eventrouter-rhel9",
            "product": "Logging for Red Hat OpenShift 6.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784747813",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:logging:6.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-logging/eventrouter-rhel9",
            "product": "Logging Subsystem for Red Hat OpenShift 6.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782408807",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:logging:6.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-logging/eventrouter-rhel9",
            "product": "Logging Subsystem for Red Hat OpenShift 6.5",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786645107",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/hypershift-addon-rhel9-operator",
            "product": "multicluster engine for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786912006",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.6::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/assisted-service-8-rhel8",
            "product": "multicluster engine for Kubernetes 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783332008",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/assisted-service-9-rhel9",
            "product": "multicluster engine for Kubernetes 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783333268",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/discovery-rhel9",
            "product": "multicluster engine for Kubernetes 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783985999",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/kube-rbac-proxy-mce-rhel9",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782477094",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/multicloud-manager-rhel9",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782308518",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/backplane-rhel9-operator",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784737366",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/discovery-rhel9",
            "product": "multicluster engine for Kubernetes 2.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784306906",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine:2.9::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/discovery-rhel9",
            "product": "multicluster engine for Kubernetes 2.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783260894",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_globalhub:1.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
            "product": "Multicluster Global Hub 1.4.5",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784061472",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_globalhub:1.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
            "product": "Multicluster Global Hub 1.6.5",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784152046",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_globalhub:1.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
            "product": "Multicluster Global Hub 1.7.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784768332",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785775948",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_api_data_protection:1.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "oadp/oadp-velero-rhel9",
            "product": "OpenShift API for Data Protection 1.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785180878",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_api_data_protection:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "oadp/oadp-velero-rhel9",
            "product": "OpenShift API for Data Protection 1.5",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788860461",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_api_data_protection:1.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "oadp/oadp-velero-rhel9",
            "product": "OpenShift API for Data Protection 1.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784058822",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/thanos-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787685239",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/acm-grafana-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782383730",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/acm-multicluster-observability-addon-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782156698",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/acm-prometheus-config-reloader-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782157632",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/acm-prometheus-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782157829",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/cluster-backup-rhel9-operator",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782157630",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/endpoint-monitoring-rhel9-operator",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782382580",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/grafana-dashboard-loader-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782383255",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/kube-rbac-proxy-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782488873",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/kube-state-metrics-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782157507",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/metrics-collector-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782396604",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-observability-rhel9-operator",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782382711",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/node-exporter-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782157546",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/observatorium-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782157471",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/observatorium-rhel9-operator",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782157018",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/prometheus-alertmanager-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782156920",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/prometheus-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782374537",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/rbac-query-proxy-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782383676",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/thanos-receive-controller-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782156860",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/thanos-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782465412",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicloud-integrations-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784652040",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multiclusterhub-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784638644",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:acm:2.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-subscription-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784740143",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4.9::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "advanced-cluster-security/rhacs-main-rhel8",
            "product": "Red Hat Advanced Cluster Security 4.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781686446",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4.10::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "advanced-cluster-security/rhacs-main-rhel8",
            "product": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1781686458",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "advanced-cluster-security/rhacs-main-rhel9",
            "product": "Red Hat Advanced Cluster Security for Kubernetes 4.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783352589",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-automation-platform-26/receptor-rhel9",
            "product": "Red Hat Ansible Automation Platform 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783962464",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-automation-platform-27/receptor-rhel9",
            "product": "Red Hat Ansible Automation Platform 2.7",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783917963",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-ui-rhel9",
            "product": "Red Hat Edge Manager 1.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783502438",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.1::el10"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-ui-rhel10",
            "product": "Red Hat Edge Manager 1.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784194574",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-ui-rhel9",
            "product": "Red Hat Edge Manager 1.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784127736",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/disk-image-cuda-rhel9",
            "product": "Red Hat Enterprise Linux AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782804957",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-aws-cuda-rhel9",
            "product": "Red Hat Enterprise Linux AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782758407",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-azure-cuda-rhel9",
            "product": "Red Hat Enterprise Linux AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782758410",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-azure-rocm-rhel9",
            "product": "Red Hat Enterprise Linux AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782754093",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-cuda-rhel9",
            "product": "Red Hat Enterprise Linux AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782744816",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-gcp-cuda-rhel9",
            "product": "Red Hat Enterprise Linux AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782758409",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-rocm-rhel9",
            "product": "Red Hat Enterprise Linux AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782744830",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:hummingbird:1"
            ],
            "defaultStatus": "affected",
            "packageName": "golang1-25-main",
            "product": "Red Hat Hardened Images",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1.25.11-2.hum1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:hummingbird:1"
            ],
            "defaultStatus": "affected",
            "packageName": "golang1-26-main",
            "product": "Red Hat Hardened Images",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1.26.4-2.hum1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator",
            "product": "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786483782",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:rhmt:1.8::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "rhmtc/openshift-migration-controller-rhel8",
            "product": "Red Hat Migration Toolkit 1.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783953372",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:migration_toolkit_applications:8.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "mta/mta-cli-rhel9",
            "product": "Red Hat Migration Toolkit for Applications 8.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785171639",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:migration_toolkit_applications:8.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "mta/mta-cli-rhel9",
            "product": "Red Hat Migration Toolkit for Applications 8.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784211378",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:multicluster_globalhub:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
            "product": "Red Hat multicluster global hub 1.5.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784127491",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-kueue-controller-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783544461",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-rhel9-operator",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784004914",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-training-operator-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783946386",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-model-registry-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1788312157",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-trustyai-service-operator-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787330073",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-feast-operator-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787051722",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-kube-auth-proxy-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787102977",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-llm-d-batch-gateway-apiserver-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786630755",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-llm-d-batch-gateway-gc-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786630724",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-llm-d-batch-gateway-processor-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786630124",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-llm-d-inference-scheduler-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786611780",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-llm-d-routing-sidecar-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786612055",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-maas-api-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787153683",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mlflow-operator-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787088234",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-automl-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787250508",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-autorag-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787251550",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-gen-ai-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786611759",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-maas-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787251250",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-mlflow-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786612219",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mod-arch-model-registry-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787250617",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-spark-operator-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787090180",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-trainer-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787089049",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-training-operator-rhel9",
            "product": "Red Hat OpenShift AI 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787361677",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_builds:1.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-builds/openshift-builds-controller-rhel9",
            "product": "Red Hat OpenShift Builds 1.7.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783057515",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_builds:1.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-builds/openshift-builds-waiters-rhel9",
            "product": "Red Hat OpenShift Builds 1.7.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783057868",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_builds:1.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-builds/openshift-builds-rhel9-operator",
            "product": "Red Hat OpenShift Builds 1.8.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784121108",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_builds:1.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-builds/openshift-builds-waiters-rhel9",
            "product": "Red Hat OpenShift Builds 1.8.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783612119",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/cephcsi-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705347",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/cephcsi-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706101",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/mcg-core-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705558",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/mcg-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705646",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-client-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706138",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-client-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705741",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-metrics-exporter-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705777",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705802",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cli-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786705938",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706577",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cosi-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706125",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-csi-addons-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706177",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-csi-addons-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706188",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-multicluster-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706679",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-multicluster-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706357",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-must-gather-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706612",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706644",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odr-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706659",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/rook-ceph-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786706880",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/cephcsi-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782932114",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/cephcsi-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782931768",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/devicefinder-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782932104",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/mcg-core-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783536000",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/mcg-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783535989",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-client-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783536515",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-client-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782932521",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-metrics-exporter-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783018461",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783018421",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-blackbox-exporter-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782932812",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cli-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783537001",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cloudnative-pg-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782932919",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783537586",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-cosi-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782932969",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-csi-addons-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782933015",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-csi-addons-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782933042",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-drbd-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783537392",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-external-snapshotter-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782933235",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-external-snapshotter-sidecar-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782933251",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-multicluster-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783537955",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-multicluster-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782933417",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-must-gather-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783537742",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odf-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782933602",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odr-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783019377",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odr-volsync-plugin-mover-rhel9",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782934054",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/odr-volsync-plugin-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782934036",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/rook-ceph-rhel9-operator",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782934284",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_devspaces:3.29::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "devspaces/udi-rhel9",
            "product": "Red Hat OpenShift Dev Spaces 3.29",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782991491",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosdt/tempo-gateway-opa-rhel9",
            "product": "Red Hat OpenShift distributed tracing 3.10.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784775772",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosdt/tempo-gateway-rhel9",
            "product": "Red Hat OpenShift distributed tracing 3.10.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784775770",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosdt/tempo-jaeger-query-rhel9",
            "product": "Red Hat OpenShift distributed tracing 3.10.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784775834",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosdt/tempo-operator-bundle",
            "product": "Red Hat OpenShift distributed tracing 3.10.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784777166",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosdt/tempo-query-rhel9",
            "product": "Red Hat OpenShift distributed tracing 3.10.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784775793",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosdt/tempo-rhel9",
            "product": "Red Hat OpenShift distributed tracing 3.10.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784775768",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosdt/tempo-rhel9-operator",
            "product": "Red Hat OpenShift distributed tracing 3.10.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784775782",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_gitops:1.19::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-gitops-1/dex-rhel8",
            "product": "Red Hat OpenShift GitOps 1.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782292352",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_gitops:1.20::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-gitops-1/dex-rhel9",
            "product": "Red Hat OpenShift GitOps 1.20",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782383826",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:2.6::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-rhel8",
            "product": "Red Hat OpenShift Service Mesh 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782287580",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782201833",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782201537",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782201812",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-service-mesh/kiali-rhel9",
            "product": "Red Hat OpenShift Service Mesh 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782201466",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_nhc:0.12::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "workload-availability/node-healthcheck-rhel9-operator",
            "product": "Red Hat OpenShift Workload Availability 0.12",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785202723",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_snr:0.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "workload-availability/self-node-remediation-rhel9-operator",
            "product": "Red Hat OpenShift Workload Availability 0.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785203036",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_sbr:0.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "workload-availability/storage-based-remediation-rhel9-operator",
            "product": "Red Hat OpenShift Workload Availability 0.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785203474",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_mdr:0.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "workload-availability/machine-deletion-remediation-rhel9-operator",
            "product": "Red Hat OpenShift Workload Availability 0.7",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785203508",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_far:0.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "workload-availability/fence-agents-remediation-rhel9-operator",
            "product": "Red Hat OpenShift Workload Availability 0.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785203079",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_nmo:5.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "workload-availability/node-maintenance-rhel9-operator",
            "product": "Red Hat OpenShift Workload Availability 5.7",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785202847",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.10::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783750447",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.12::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.12",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783751865",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784353904",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.15::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.15",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784351966",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel9",
            "product": "Red Hat Quay 3.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783955846",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel9",
            "product": "Red Hat Quay 3.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786181981",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.9::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784125838",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "satellite/iop-vmaas-rhel9",
            "product": "Red Hat Satellite 6.18",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785923308",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "satellite/iop-vmaas-rhel9",
            "product": "Red Hat Satellite 6.19",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785929994",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "conforma-cli-stack-v1",
            "product": "Red Hat Trusted Artifact Signer 1.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "4-1.4.2",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "4-1.4.3",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:webterminal:1.11::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "web-terminal/web-terminal-exec-rhel9",
            "product": "Red Hat Web Terminal 1.11",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784296203",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:webterminal:1.12::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "web-terminal/web-terminal-exec-rhel9",
            "product": "Red Hat Web Terminal 1.12",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784247610",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:webterminal:1.13::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "web-terminal/web-terminal-exec-rhel9",
            "product": "Red Hat Web Terminal 1.13",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784296127",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:webterminal:1.14::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "web-terminal/web-terminal-exec-rhel9",
            "product": "Red Hat Web Terminal 1.14",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784296114",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:webterminal:1.15::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "web-terminal/web-terminal-exec-rhel9",
            "product": "Red Hat Web Terminal 1.15",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784296033",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:webterminal:1.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "web-terminal/web-terminal-exec-rhel9",
            "product": "Red Hat Web Terminal 1.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784295767",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:assisted_installer:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhai/assisted-installer-rhel9",
            "product": "Assisted Installer for Red Hat OpenShift Container Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_compliance_operator:1"
            ],
            "defaultStatus": "affected",
            "packageName": "compliance/openshift-compliance-operator-bundle",
            "product": "Compliance Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:confidential_compute_attestation:1"
            ],
            "defaultStatus": "affected",
            "packageName": "build-of-trustee/trustee-rhel9-operator",
            "product": "Confidential Compute Attestation",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:confidential_compute_attestation:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-sandboxed-containers/osc-monitor-rhel9",
            "product": "Confidential Compute Attestation",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:cryostat:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "cryostat/cryostat-storage-rhel9",
            "product": "Cryostat 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:deployment_validator_operator"
            ],
            "defaultStatus": "affected",
            "packageName": "dvo/deployment-validation-rhel8-operator",
            "product": "Deployment Validation Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ext_dns_optr:1"
            ],
            "defaultStatus": "affected",
            "packageName": "edo/external-dns-rhel9",
            "product": "ExternalDNS Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ext_dns_optr:1"
            ],
            "defaultStatus": "affected",
            "packageName": "edo/external-dns-rhel9-operator",
            "product": "ExternalDNS Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:external_secrets_operator:1"
            ],
            "defaultStatus": "affected",
            "packageName": "external-secrets-operator/external-secrets-rhel9",
            "product": "External Secrets Operator for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_far:0"
            ],
            "defaultStatus": "affected",
            "packageName": "redhat-user-workloads/far-operator-0-8",
            "product": "Fence Agents Remediation Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_file_integrity_operator:1"
            ],
            "defaultStatus": "affected",
            "packageName": "compliance/openshift-compliance-operator-bundle",
            "product": "File Integrity Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:gatekeeper:3"
            ],
            "defaultStatus": "affected",
            "packageName": "gatekeeper/gatekeeper-rhel9-operator",
            "product": "Gatekeeper 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:lvms:4",
              "cpe:/a:redhat:lvms:5"
            ],
            "defaultStatus": "unaffected",
            "packageName": "lvms4/lvms-rhel9-operator",
            "product": "Logical Volume Manager Storage",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:lvms:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "lvms4/topolvm-rhel8",
            "product": "Logical Volume Manager Storage",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:lvms:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "lvms4/topolvm-rhel9",
            "product": "Logical Volume Manager Storage",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_mdr:0"
            ],
            "defaultStatus": "affected",
            "packageName": "redhat-user-workloads/mdr-operator-0-7",
            "product": "Machine Deletion Remediation Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multiarch_tuning_operator"
            ],
            "defaultStatus": "affected",
            "packageName": "multiarch-tuning/multiarch-tuning-rhel9-operator",
            "product": "Multiarch Tuning Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/addon-manager-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/assisted-installer-agent-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/assisted-installer-controller-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/assisted-installer-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-api-provider-agent-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-api-provider-kubevirt-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/clusterclaims-controller-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-curator-controller-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-image-set-controller-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/clusterlifecycle-state-metrics-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-proxy-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/image-based-install-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/placement-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/provider-credential-controller-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/registration-operator-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/registration-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/work-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:network_observ_optr:1"
            ],
            "defaultStatus": "affected",
            "packageName": "network-observability/network-observability-cli-rhel9",
            "product": "Network Observability Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_nhc:0"
            ],
            "defaultStatus": "affected",
            "packageName": "node-healthcheck-operator-tech-preview/node-healthcheck-rhel8-operator",
            "product": "Node HealthCheck Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_nhc:0"
            ],
            "defaultStatus": "affected",
            "packageName": "redhat-user-workloads/nhc-operator-0-12",
            "product": "Node HealthCheck Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:workload_availability_nhc:0"
            ],
            "defaultStatus": "affected",
            "packageName": "workload-availability/node-healthcheck-rhel8-operator",
            "product": "Node HealthCheck Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_api_data_protection:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "multicluster-engine/hypershift-addon-rhel9-operator",
            "product": "OpenShift API for Data Protection",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_api_data_protection:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-hypershift-rhel9",
            "product": "OpenShift API for Data Protection",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ocp_tools"
            ],
            "defaultStatus": "affected",
            "packageName": "helm",
            "product": "OpenShift Developer Tools and Services",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_lightspeed"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-lightspeed/lightspeed-rhel9-operator",
            "product": "OpenShift Lightspeed",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines-client",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-scheduler-rhel9",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:serverless:1"
            ],
            "defaultStatus": "affected",
            "packageName": "kn-workflow-plugin",
            "product": "OpenShift Serverless",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:serverless:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-serverless-1/kn-plugin-event-sender-rhel9",
            "product": "OpenShift Serverless",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:serverless:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-serverless-1/logic-rhel9-operator",
            "product": "OpenShift Serverless",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:serverless:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-serverless-clients",
            "product": "OpenShift Serverless",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_power_monitoring"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-power-monitoring/kepler-rhel9",
            "product": "Power monitoring for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:red_hat_3scale_amp:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "3scale-amp2/3scale-rhel7-operator",
            "product": "Red Hat 3scale API Management Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:red_hat_3scale_amp:2"
            ],
            "defaultStatus": "affected",
            "packageName": "3scale-amp2/3scale-rhel9-operator",
            "product": "Red Hat 3scale API Management Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/cluster-permission-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhacm2/acm-cli-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/acm-cluster-permission-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhacm2/acm-governance-policy-addon-controller-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhacm2/acm-governance-policy-framework-addon-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhacm2/acm-must-gather-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/acm-search-indexer-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/acm-search-v2-api-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/acm-search-v2-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/acm-volsync-addon-controller-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhacm2/cert-policy-controller-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhacm2/config-policy-controller-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhacm2/governance-policy-propagator-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/insights-client-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/insights-metrics-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/klusterlet-addon-controller-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/memcached-exporter-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-application-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/multicluster-operators-channel-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/search-collector-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/subctl-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/submariner-addon-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "ansible-automation-platform/platform-operator-bundle",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "automation-gateway-proxy",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "automation-gateway-proxy-openssl30",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "automation-gateway-proxy-openssl32",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "python3.11-galaxy-ng",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "python3.12-galaxy-ng",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ceph_storage:5"
            ],
            "defaultStatus": "affected",
            "packageName": "rhceph/rhceph-5-dashboard-rhel8",
            "product": "Red Hat Ceph Storage 5",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ceph_storage:6"
            ],
            "defaultStatus": "affected",
            "packageName": "rhceph/rhceph-6-dashboard-rhel9",
            "product": "Red Hat Ceph Storage 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ceph_storage:8"
            ],
            "defaultStatus": "affected",
            "packageName": "rhceph/grafana-rhel9",
            "product": "Red Hat Ceph Storage 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ceph_storage:9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhceph/alloy-rhel10",
            "product": "Red Hat Ceph Storage 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:certifications:9"
            ],
            "defaultStatus": "affected",
            "packageName": "redhat-certification-preflight",
            "product": "Red Hat Certification Program for Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:connectivity_link:1"
            ],
            "defaultStatus": "affected",
            "packageName": "rhcl-1/authorino-rhel9",
            "product": "Red Hat Connectivity Link 1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhdh:1"
            ],
            "defaultStatus": "unknown",
            "packageName": "rhdh/rhdh-rhel9-operator",
            "product": "Red Hat Developer Hub",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "buildah",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "butane",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "delve",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "go-fdo-client",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "golang-github-openprinting-ipp-usb",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "gvisor-tap-vsock",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "ignition",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "podman",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc-worker-playbook",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "rhel10/bootc-image-builder",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "rhel10-eus/rhel-10.0-bootc-image-builder",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "skopeo",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "toolbox",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "trustee",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "packageName": "trustee-guest-components",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:7"
            ],
            "defaultStatus": "unaffected",
            "packageName": "host-metering",
            "product": "Red Hat Enterprise Linux 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:7"
            ],
            "defaultStatus": "affected",
            "packageName": "rhc",
            "product": "Red Hat Enterprise Linux 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-tools:rhel8/buildah",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-tools:rhel8/conmon",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-tools:rhel8/containernetworking-plugins",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-tools:rhel8/podman",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-tools:rhel8/skopeo",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-tools:rhel8/toolbox",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "weldr-client",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "buildah",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "butane",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "conmon",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "containernetworking-plugins",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "gvisor-tap-vsock",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "ignition",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "podman",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhel9/bootc-image-builder",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhel9-eus/rhel-9.6-bootc-image-builder",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "skopeo",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "toolbox",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "trustee-guest-components",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "weldr-client",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3"
            ],
            "defaultStatus": "affected",
            "packageName": "golang",
            "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:hummingbird:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "golang-fips1.25",
            "product": "Red Hat Hardened Images",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-ai-gateway-payload-processing-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-codeflare-operator-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-data-science-pipelines-argo-argoexec-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-data-science-pipelines-operator-controller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-eval-hub-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-kf-notebook-controller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-kserve-llmisvc-controller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-kuberay-operator-controller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-llama-stack-k8s-operator-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-maas-controller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-ml-pipelines-api-server-v2-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-ml-pipelines-driver-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-ml-pipelines-launcher-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mm-rest-proxy-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-mod-arch-eval-hub-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-model-controller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-modelmesh-runtime-adapter-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-modelmesh-serving-controller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-model-registry-operator-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-model-registry-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-model-serving-api-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-notebook-controller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-rhaii-cluster-validator-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-rhel8-operator",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workload-variant-autoscaler-controller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/rhai-cli-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_cluster_manager_cli:1"
            ],
            "defaultStatus": "affected",
            "packageName": "ocm-cli-clients/ocm-cli-rhel9",
            "product": "Red Hat OpenShift Cluster Manager CLI",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "atomic-openshift-service-idler",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "butane",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "conmon",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "conmon-rs",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "containernetworking-plugins",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "cri-o",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "cri-tools",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "golang-github-prometheus-promu",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "ignition",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "kata-containers",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/frr-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-cli",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-hypershift-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-kuryr",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "ose-aws-ecr-image-credential-provider",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "ose-gcp-gcr-image-credential-provider",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "podman",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "rh-osbs/openshift-golang-builder",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "skopeo",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_distributed_tracing:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosdt/opentelemetry-rhel9-operator",
            "product": "Red Hat OpenShift distributed tracing 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:windows_machine_config"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4-wincw/windows-machine-config-rhel9-operator",
            "product": "Red Hat OpenShift for Windows Containers",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_service_on_aws:1"
            ],
            "defaultStatus": "affected",
            "packageName": "rosa",
            "product": "Red Hat OpenShift on AWS",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-native-virtualization/kubevirt-apiserver-proxy-rhel9",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "affected",
            "packageName": "kubevirt",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:16.2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "golang-github-infrawatch-apputils",
            "product": "Red Hat OpenStack Platform 16.2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:16.2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhosp-rhel8/osp-director-agent",
            "product": "Red Hat OpenStack Platform 16.2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "collectd-libpod-stats",
            "product": "Red Hat OpenStack Platform 17.1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1"
            ],
            "defaultStatus": "affected",
            "packageName": "etcd",
            "product": "Red Hat OpenStack Platform 17.1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "golang-github-infrawatch-apputils",
            "product": "Red Hat OpenStack Platform 17.1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:17.1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhosp-rhel9/osp-director-agent",
            "product": "Red Hat OpenStack Platform 17.1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:18.0"
            ],
            "defaultStatus": "unaffected",
            "packageName": "golang-github-openstack-k8s-operators-os-diff",
            "product": "Red Hat OpenStack Platform 18.0",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openstack:18.0"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoso-operators/ovn-rhel9-operator",
            "product": "Red Hat OpenStack Platform 18.0",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6"
            ],
            "defaultStatus": "affected",
            "packageName": "satellite:el8/yggdrasil-worker-forwarder",
            "product": "Red Hat Satellite 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_interconnect:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "skupper-cli",
            "product": "Red Hat Service Interconnect 1",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_interconnect:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "skupper-cli",
            "product": "Red Hat Service Interconnect 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_security_profiles_operator:1"
            ],
            "defaultStatus": "affected",
            "packageName": "compliance/openshift-security-profiles-rhel8-operator",
            "product": "Security Profiles Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:zero_trust_workload_identity_manager:1"
            ],
            "defaultStatus": "affected",
            "packageName": "zero-trust-workload-identity-manager/spiffe-csi-driver-rhel9",
            "product": "Zero Trust Workload Identity Manager",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:zero_trust_workload_identity_manager:0"
            ],
            "defaultStatus": "affected",
            "packageName": "zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9",
            "product": "Zero Trust Workload Identity Manager - Tech Preview",
            "vendor": "Red Hat"
          }
        ],
        "datePublic": "2026-05-22T15:01:21.462Z",
        "descriptions": [
          {
            "lang": "en",
            "value": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected."
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "namespace": "https://access.redhat.com/security/updates/classification/",
                "value": "Important"
              },
              "type": "Red Hat severity rating"
            }
          },
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 8.2,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "CHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
              "version": "3.1"
            },
            "format": "CVSS"
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-1289",
                "description": "Improper Validation of Unsafe Equivalence in Input",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-17T12:04:30.881Z",
          "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
          "shortName": "redhat-SADP"
        },
        "references": [
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2026-39821"
          },
          {
            "name": "RHBZ#2480756",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
          },
          {
            "tags": [
              "x_sadp-csaf-vex"
            ],
            "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39821.json"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42079"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42080"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41019"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:66350"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54191"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42078"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54757"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54580"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34789"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42082"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36796"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57845"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:62549"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:65851"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42150"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42151"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42240"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:67149"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:49702"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:67517"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:56143"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:59546"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:53413"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:63134"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:53374"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:51187"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:30855"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:46395"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:37436"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:35827"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:35826"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:65534"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34357"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:66432"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:39005"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:39573"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:38995"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:30853"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:35830"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:35831"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:66016"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41930"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:68504"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:67319"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:61253"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:67160"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:65359"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:61245"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60354"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57649"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:67159"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:59549"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:53412"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:59562"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60315"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:67287"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:49712"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:51112"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:56223"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:52826"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:53415"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57541"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54401"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:30854"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:37435"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:35828"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:35829"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:65886"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34359"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:65153"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:39879"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54531"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34342"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36808"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34364"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:56340"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:47952"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:50843"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41030"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:44622"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:47149"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:53530"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:51033"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:66022"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:43692"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60387"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:30651"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:47737"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:26546"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:26547"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36207"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42132"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42142"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36651"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:40945"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:40118"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33531"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33524"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:23262"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:23264"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54441"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41928"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:50300"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:43038"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42644"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:65126"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60520"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36648"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41036"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36820"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:35994"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:35993"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33155"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33160"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33163"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33173"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:33183"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54287"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54284"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54286"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54285"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54274"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54283"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:44624"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:56431"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:37387"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41031"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42146"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:43052"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42796"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41066"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54395"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:40262"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:51341"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:51194"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36797"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42043"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42047"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42050"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42051"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42049"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42048"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42852"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:54435"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57194"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36105"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36167"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:41055"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:47735"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:30650"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36883"
          }
        ],
        "solutions": [
          {
            "lang": "en",
            "value": "RHSA-2026:42079: Red Hat Ansible Automation Platform 2.6 for RHEL 10, Red Hat Ansible Automation Platform 2.6 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42080: Red Hat Ansible Automation Platform 2.7 for RHEL 10, Red Hat Ansible Automation Platform 2.7 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41019: RHEM 1.1 for RHEL 10, RHEM 1.1 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:66350: Red Hat OpenShift Container Platform 4.21"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54191: Red Hat Enterprise Linux Server (v. 7 ELS)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42078: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54757: Red Hat OpenStack Platform 16.2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54580: Red Hat OpenShift Container Platform 4.20"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34789: Red Hat OpenShift Container Platform 4.22"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42082: Red Hat Satellite 6.16 for RHEL 8, Red Hat Satellite 6.16 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36796: RHEM 1.0 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57845: Red Hat OpenShift Container Platform 4.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:62549: Red Hat OpenShift Container Platform 4.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:65851: Red Hat OpenShift Container Platform 4.18"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42150: Red Hat Satellite 6.17 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42151: Red Hat Satellite 6.18 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42240: Red Hat Satellite 6.19 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:67149: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:49702: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:67517: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:56143: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:59546: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:53413: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:63134: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:53374: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:51187: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:30855: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:46395: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:37436: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:35827: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:35826: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:65534: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34357: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:66432: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:39005: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:39573: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:38995: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:30853: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:35830: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:35831: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:66016: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41930: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:68504: Red Hat Enterprise Linux AppStream E4S (v.8.8), Red Hat Enterprise Linux AppStream TUS (v.8.8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:67319: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:61253: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:67160: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:65359: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:61245: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60354: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57649: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:67159: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:59549: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:53412: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:59562: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60315: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:67287: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:49712: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:51112: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:56223: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:52826: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:53415: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57541: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54401: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:30854: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:37435: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:35828: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:35829: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:65886: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34359: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:65153: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:39879: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54531: Cert Manager support for Red Hat OpenShift release 1.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34342: Cluster Observability Operator 1.5.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36808: DevWorkspace Operator 0.42"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34364: Logging Subsystem for Red Hat OpenShift 6.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:56340: Logging Subsystem for Red Hat OpenShift 6.5"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:47952: Logging for Red Hat OpenShift 6.2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:50843: Logging for Red Hat OpenShift 6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41030: Multicluster Global Hub 1.4.5"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:44622: Multicluster Global Hub 1.6.5"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:47149: Multicluster Global Hub 1.7.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:53530: Multicluster Global Hub 1.7.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:51033: OpenShift API for Data Protection 1.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:66022: OpenShift API for Data Protection 1.5"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:43692: OpenShift API for Data Protection 1.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60387: Red Hat Advanced Cluster Management for Kubernetes 2.11"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:30651: Red Hat Advanced Cluster Management for Kubernetes 2.13"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:47737: Red Hat Advanced Cluster Management for Kubernetes 2.13"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:26546: Red Hat Advanced Cluster Security 4.9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:26547: Red Hat Advanced Cluster Security for Kubernetes 4.10"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36207: Red Hat Advanced Cluster Security for Kubernetes 4.11"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42132: Red Hat Ansible Automation Platform 2.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42142: Red Hat Ansible Automation Platform 2.7"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36651: Red Hat Edge Manager 1.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:40945: Red Hat Edge Manager 1.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:40118: Red Hat Edge Manager 1.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33531: Red Hat Enterprise Linux AI 3.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33524: Red Hat Enterprise Linux AI 3.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:23262: Red Hat Hardened Images"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:23264: Red Hat Hardened Images"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54441: Red Hat Lightspeed (formerly Insights) for Runtimes 1.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41928: Red Hat Migration Toolkit 1.8"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:50300: Red Hat Migration Toolkit for Applications 8.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:43038: Red Hat Migration Toolkit for Applications 8.2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42644: Red Hat OpenShift AI 2.25"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:65126: Red Hat OpenShift AI 2.25"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:60520: Red Hat OpenShift AI 3.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36648: Red Hat OpenShift Builds 1.7.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41036: Red Hat OpenShift Builds 1.8.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36820: Red Hat OpenShift Dev Spaces 3.29"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:35994: Red Hat OpenShift GitOps 1.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:35993: Red Hat OpenShift GitOps 1.20"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33155: Red Hat OpenShift Service Mesh 2.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33160: Red Hat OpenShift Service Mesh 3.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33163: Red Hat OpenShift Service Mesh 3.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33173: Red Hat OpenShift Service Mesh 3.2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:33183: Red Hat OpenShift Service Mesh 3.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54287: Red Hat OpenShift Workload Availability 0.12"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54284: Red Hat OpenShift Workload Availability 0.13"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54286: Red Hat OpenShift Workload Availability 0.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54285: Red Hat OpenShift Workload Availability 0.7"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54274: Red Hat OpenShift Workload Availability 0.8"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54283: Red Hat OpenShift Workload Availability 5.7"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:44624: Red Hat OpenShift distributed tracing 3.10.2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:56431: Red Hat Openshift Data Foundation 4.18"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:37387: Red Hat Openshift Data Foundation 4.22"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41031: Red Hat Quay 3.10"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42146: Red Hat Quay 3.12"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:43052: Red Hat Quay 3.12"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42796: Red Hat Quay 3.15"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41066: Red Hat Quay 3.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54395: Red Hat Quay 3.17"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:40262: Red Hat Quay 3.9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:51341: Red Hat Satellite 6.18"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:51194: Red Hat Satellite 6.19"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36797: Red Hat Trusted Artifact Signer 1.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42043: Red Hat Web Terminal 1.11"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42047: Red Hat Web Terminal 1.12"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42050: Red Hat Web Terminal 1.13"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42051: Red Hat Web Terminal 1.14"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42049: Red Hat Web Terminal 1.15"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42048: Red Hat Web Terminal 1.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42852: Red Hat multicluster global hub 1.5.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:54435: Streams for Apache Kafka 3.2.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57194: multicluster engine for Kubernetes 2.11"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36105: multicluster engine for Kubernetes 2.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36167: multicluster engine for Kubernetes 2.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:41055: multicluster engine for Kubernetes 2.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:47735: multicluster engine for Kubernetes 2.8"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:30650: multicluster engine for Kubernetes 2.8"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36883: multicluster engine for Kubernetes 2.9"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-05-22T16:00:52.844Z",
            "value": "Reported to Red Hat."
          },
          {
            "lang": "en",
            "time": "2026-05-22T15:01:21.462Z",
            "value": "Made public."
          }
        ],
        "title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
        "workarounds": [
          {
            "lang": "en",
            "value": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds."
          }
        ],
        "x_adpType": "supplier",
        "x_generator": {
          "engine": "sadp-cli 1.0.0"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "net/http",
          "product": "net/http",
          "programRoutines": [
            {
              "name": "idnaASCII"
            },
            {
              "name": "Client.CloseIdleConnections"
            },
            {
              "name": "Client.Do"
            },
            {
              "name": "Client.Get"
            },
            {
              "name": "Client.Head"
            },
            {
              "name": "Client.Post"
            },
            {
              "name": "Client.PostForm"
            },
            {
              "name": "ClientConn.Close"
            },
            {
              "name": "ClientConn.RoundTrip"
            },
            {
              "name": "Get"
            },
            {
              "name": "Head"
            },
            {
              "name": "Post"
            },
            {
              "name": "PostForm"
            },
            {
              "name": "Transport.CloseIdleConnections"
            },
            {
              "name": "Transport.NewClientConn"
            },
            {
              "name": "Transport.RoundTrip"
            },
            {
              "name": "http1ClientConn.Close"
            },
            {
              "name": "http1ClientConn.RoundTrip"
            },
            {
              "name": "http2ClientConn.RoundTrip"
            },
            {
              "name": "http2RoundTripper.RoundTrip"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.25.13",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.26.6",
              "status": "affected",
              "version": "1.26.0-0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.27.0-rc.3",
              "status": "affected",
              "version": "1.27.0-0",
              "versionType": "semver"
            }
          ]
        },
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "net/http/internal/http2",
          "product": "net/http/internal/http2",
          "programRoutines": [
            {
              "name": "authorityAddr"
            },
            {
              "name": "Transport.AddConn"
            },
            {
              "name": "Transport.RoundTrip"
            },
            {
              "name": "Transport.RoundTripOpt"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.25.13",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.26.6",
              "status": "affected",
              "version": "1.26.0-0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.27.0-rc.3",
              "status": "affected",
              "version": "1.27.0-0",
              "versionType": "semver"
            }
          ]
        },
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "golang.org/x/net/idna",
          "product": "golang.org/x/net/idna",
          "programRoutines": [
            {
              "name": "Profile.process"
            },
            {
              "name": "Profile.ToASCII"
            },
            {
              "name": "Profile.ToUnicode"
            },
            {
              "name": "ToASCII"
            },
            {
              "name": "ToUnicode"
            }
          ],
          "vendor": "golang.org/x/net",
          "versions": [
            {
              "lessThan": "0.55.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "KC1zs4 (https://github.com/KC1zs4)"
        },
        {
          "lang": "en",
          "value": "Longwei Wang (https://github.com/gn00295120)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode(\"xn--example-.com\") incorrectly returns the name \"example.com\" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject \"example.com\" but permit \"xn--example-.com\". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name \"example.com\"."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-1289: Improper Validation of Unsafe Equivalence in Input",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-21T21:01:48.612Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/cl/767220"
        },
        {
          "url": "https://go.dev/issue/78760"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-5026"
        }
      ],
      "title": "Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-39821",
    "datePublished": "2026-05-22T15:01:21.462Z",
    "dateReserved": "2026-04-07T18:13:03.526Z",
    "dateUpdated": "2026-09-17T12:04:30.881Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

How durations are calculated

Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.

Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2026:95081

CVE-2026-102276 (GCVE-0-2026-102276)

CVE-2026-102278 (GCVE-0-2026-102278)

CVE-2026-109383 (GCVE-0-2026-109383)

CVE-2026-109829 (GCVE-0-2026-109829)

CVE-2026-109855 (GCVE-0-2026-109855)

CVE-2026-109869 (GCVE-0-2026-109869)

CVE-2026-19534 (GCVE-0-2026-19534)

CVE-2026-27145 (GCVE-0-2026-27145)

CVE-2026-33818 (GCVE-0-2026-33818)

CVE-2026-39821 (GCVE-0-2026-39821)

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour