Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2026-48779 (GCVE-0-2026-48779)
Vulnerability from cvelistv5 – Published: 2026-06-16 21:26 – Updated: 2026-08-04 12:07
VLAI
EPSS
VEX
Title
ws: Memory exhaustion DoS from tiny fragments and data chunks
Summary
ws is an open source WebSocket client and server for Node.js. All versions from 1.1.0 up to (but not including) 5.2.5, from 6.0.0 up to 6.2.4, from 7.0.0 up to 7.5.11, and from 8.0.0 up to 8.21.0 are affected by a memory exhaustion DoS vulnerability. A peer can send a high volume of exceptionally small fragments and data chunks, with modest network traffic, to force the remote peer into allocating and holding structural wrappers that consume far more memory than the default documented message-size limit, leading to process termination due to OOM. This issue has been fixed in versions 5.2.5, 6.2.4, 7.5.11, and 8.21.0.
Severity
7.5 (High)
SSVC
Exploitation: poc
Automatable: yes
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
Assigner
References
24 references
Impacted products
121 products
| Vendor | Product | Version | |
|---|---|---|---|
| websockets | ws |
Affected:
>= 1.1.0, < 5.2.5
Affected: >= 6.0.0, < 6.2.4 Affected: >= 7.0.0, < 7.5.11 Affected: >= 8.0.0, < 8.21.0 |
|
| Red Hat | Cryostat 4 on RHEL 9 |
Unaffected:
4.2.0-13 , < *
(rpm)
cpe:/a:redhat:cryostat:4::el9 |
|
| Red Hat | Cluster Observability Operator 1.5.0 |
Unaffected:
1782840519 , < *
(rpm)
cpe:/a:redhat:cluster_observability_operator:1.5::el9 |
|
| Red Hat | Cluster Observability Operator 1.5.0 |
Unaffected:
1782839981 , < *
(rpm)
cpe:/a:redhat:cluster_observability_operator:1.5::el9 |
|
| Red Hat | Cluster Observability Operator 1.5.0 |
Unaffected:
1782839193 , < *
(rpm)
cpe:/a:redhat:cluster_observability_operator:1.5::el9 |
|
| Red Hat | Cluster Observability Operator 1.5.0 |
Unaffected:
1782838753 , < *
(rpm)
cpe:/a:redhat:cluster_observability_operator:1.5::el9 |
|
| Red Hat | Cluster Observability Operator 1.5.0 |
Unaffected:
1782839279 , < *
(rpm)
cpe:/a:redhat:cluster_observability_operator:1.5::el9 |
|
| Red Hat | Cluster Observability Operator 1.5.0 |
Unaffected:
1782840539 , < *
(rpm)
cpe:/a:redhat:cluster_observability_operator:1.5::el9 |
|
| Red Hat | Cluster Observability Operator 1.5.0 |
Unaffected:
1782841925 , < *
(rpm)
cpe:/a:redhat:cluster_observability_operator:1.5::el9 |
|
| Red Hat | Cluster Observability Operator 1.5.0 |
Unaffected:
1782844225 , < *
(rpm)
cpe:/a:redhat:cluster_observability_operator:1.5::el9 |
|
| Red Hat | Cluster Observability Operator 1.5.0 |
Unaffected:
1782839658 , < *
(rpm)
cpe:/a:redhat:cluster_observability_operator:1.5::el9 |
|
| Red Hat | Cluster Observability Operator 1.5.0 |
Unaffected:
1782838476 , < *
(rpm)
cpe:/a:redhat:cluster_observability_operator:1.5::el9 |
|
| Red Hat | Cluster Observability Operator 1.5.0 |
Unaffected:
1782839996 , < *
(rpm)
cpe:/a:redhat:cluster_observability_operator:1.5::el9 |
|
| Red Hat | Cluster Observability Operator 1.5.0 |
Unaffected:
1782839494 , < *
(rpm)
cpe:/a:redhat:cluster_observability_operator:1.5::el9 |
|
| Red Hat | Red Hat Developer Hub 1.10 |
Unaffected:
1783448184 , < *
(rpm)
cpe:/a:redhat:rhdh:1.10::el9 |
|
| Red Hat | Red Hat Developer Hub 1.9 |
Unaffected:
1782761244 , < *
(rpm)
cpe:/a:redhat:rhdh:1.9::el9 |
|
| Red Hat | Red Hat Discovery 2 |
Unaffected:
1782166952 , < *
(rpm)
cpe:/a:redhat:discovery:2::el9 |
|
| Red Hat | Red Hat Migration Toolkit 1.8 |
Unaffected:
1783690532 , < *
(rpm)
cpe:/a:redhat:rhmt:1.8::el8 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1783676191 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1783929816 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1784094353 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1784093953 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1784094943 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1783676585 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1783676649 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1783676675 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1784094299 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1784094725 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1783676820 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1783676883 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1783676894 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1784095175 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1783676977 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1784093503 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1783677297 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1783677345 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1783677533 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1783684360 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1783684068 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1784054582 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1784054606 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1784055295 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1783684603 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1783684668 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1783684667 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1784054873 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1783684707 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1784055589 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1783684779 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1783684831 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1783684839 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1784055533 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1784055558 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1784056134 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1783685128 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1783685129 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1783685375 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1783667125 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1783666755 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1784054598 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1784055387 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1784055726 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1783667517 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1783667577 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1783667611 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1784055020 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1783667641 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1784055586 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1783667790 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1783667859 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1783667875 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1783667869 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1783667877 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1784055576 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1784055244 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1784055382 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1783668266 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1783668288 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1783669219 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat OpenShift Dev Spaces 3.29 |
Unaffected:
1782498475 , < *
(rpm)
cpe:/a:redhat:openshift_devspaces:3.29::el9 |
|
| Red Hat | Red Hat OpenShift Dev Spaces 3.29 |
Unaffected:
1782498792 , < *
(rpm)
cpe:/a:redhat:openshift_devspaces:3.29::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 2.6 |
Unaffected:
1781937133 , < *
(rpm)
cpe:/a:redhat:service_mesh:2.6::el8 |
|
| Red Hat | Red Hat OpenShift Service Mesh 2.6 |
Unaffected:
1782287580 , < *
(rpm)
cpe:/a:redhat:service_mesh:2.6::el8 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.0 |
Unaffected:
1782201894 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.0::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.0 |
Unaffected:
1782201833 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.0::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.1 |
Unaffected:
1782201696 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.1::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.1 |
Unaffected:
1782201537 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.1::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.2 |
Unaffected:
1782201851 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.2::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.2 |
Unaffected:
1782201812 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.2::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.3 |
Unaffected:
1782231869 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.3::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.3 |
Unaffected:
1782201466 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.3::el9 |
|
| Red Hat | Red Hat Trusted Artifact Signer 1.4 |
Unaffected:
1783327185 , < *
(rpm)
cpe:/a:redhat:trusted_artifact_signer:1.4::el9 |
|
| Red Hat | Cryostat 4 |
cpe:/a:redhat:cryostat:4 |
|
| Red Hat | Gatekeeper 3 |
cpe:/a:redhat:gatekeeper:3 |
|
| Red Hat | Node HealthCheck Operator |
cpe:/a:redhat:workload_availability_nhc:0 |
|
| Red Hat | OpenShift Lightspeed |
cpe:/a:redhat:openshift_lightspeed |
|
| Red Hat | OpenShift Pipelines |
cpe:/a:redhat:openshift_pipelines:1 |
|
| Red Hat | OpenShift Service Mesh 3 |
cpe:/a:redhat:service_mesh:3 |
|
| Red Hat | Red Hat AMQ Broker 7 |
cpe:/a:redhat:amq_broker:7 |
|
| Red Hat | Red Hat Ansible Automation Platform 2 |
cpe:/a:redhat:ansible_automation_platform:2 |
|
| Red Hat | Red Hat build of Apache Camel for Spring Boot 4 |
cpe:/a:redhat:camel_spring_boot:4 |
|
| Red Hat | Red Hat build of Apache Camel - HawtIO 4 |
cpe:/a:redhat:apache_camel_hawtio:4 |
|
| Red Hat | Red Hat Build of Keycloak |
cpe:/a:redhat:build_keycloak: |
|
| Red Hat | Red Hat Build of Podman Desktop |
cpe:/a:redhat:podman_desktop:1 |
|
| Red Hat | Red Hat Build of Podman Desktop - Tech Preview |
cpe:/a:redhat:podman_desktop:0 |
|
| Red Hat | Red Hat Connectivity Link 1 |
cpe:/a:redhat:connectivity_link:1 |
|
| Red Hat | Red Hat Data Grid 8 |
cpe:/a:redhat:jboss_data_grid:8 |
|
| Red Hat | Red Hat Enterprise Linux 10 |
cpe:/o:redhat:enterprise_linux:10 |
|
| Red Hat | Red Hat Enterprise Linux 8 |
cpe:/o:redhat:enterprise_linux:8 |
|
| Red Hat | Red Hat Enterprise Linux 9 |
cpe:/o:redhat:enterprise_linux:9 |
|
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) 3 |
cpe:/a:redhat:enterprise_linux_ai:3 |
|
| Red Hat | Red Hat Fuse 7 |
cpe:/a:redhat:jboss_fuse:7 |
|
| Red Hat | Red Hat Hardened Images |
cpe:/a:redhat:hummingbird:1 |
|
| Red Hat | Red Hat JBoss Enterprise Application Platform 8 |
cpe:/a:redhat:jboss_enterprise_application_platform:8 |
|
| Red Hat | Red Hat JBoss Enterprise Application Platform Expansion Pack |
cpe:/a:redhat:jbosseapxp |
|
| Red Hat | Red Hat OpenShift AI (RHOAI) |
cpe:/a:redhat:openshift_ai |
|
| Red Hat | Red Hat OpenShift Container Platform 4 |
cpe:/a:redhat:openshift:4 |
|
| Red Hat | Red Hat OpenShift Virtualization 4 |
cpe:/a:redhat:container_native_virtualization:4 |
|
| Red Hat | Red Hat Quay 3 |
cpe:/a:redhat:quay:3 |
|
| Red Hat | Red Hat Satellite 6 |
cpe:/a:redhat:satellite:6 |
|
| Red Hat | Self-service automation portal 2 |
cpe:/a:redhat:ansible_portal:2 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-48779",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-06-17T18:07:28.748295Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-06-17T18:12:48.129Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p"
}
],
"title": "CISA ADP Vulnrichment"
},
{
"affected": [
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cryostat:4::el9"
],
"defaultStatus": "affected",
"packageName": "cryostat/cryostat-openshift-console-plugin-rhel9",
"product": "Cryostat 4 on RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "4.2.0-13",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cluster_observability_operator:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9",
"product": "Cluster Observability Operator 1.5.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782840519",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cluster_observability_operator:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9",
"product": "Cluster Observability Operator 1.5.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782839981",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cluster_observability_operator:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9",
"product": "Cluster Observability Operator 1.5.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782839193",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cluster_observability_operator:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "cluster-observability-operator/distributed-tracing-console-plugin-rhel9",
"product": "Cluster Observability Operator 1.5.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782838753",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cluster_observability_operator:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "cluster-observability-operator/logging-console-plugin-pf4-rhel9",
"product": "Cluster Observability Operator 1.5.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782839279",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cluster_observability_operator:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "cluster-observability-operator/logging-console-plugin-pf5-rhel9",
"product": "Cluster Observability Operator 1.5.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782840539",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cluster_observability_operator:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "cluster-observability-operator/logging-console-plugin-rhel9",
"product": "Cluster Observability Operator 1.5.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782841925",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cluster_observability_operator:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "cluster-observability-operator/monitoring-console-plugin-pf5-rhel9",
"product": "Cluster Observability Operator 1.5.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782844225",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cluster_observability_operator:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "cluster-observability-operator/monitoring-console-plugin-pf6-rhel9",
"product": "Cluster Observability Operator 1.5.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782839658",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cluster_observability_operator:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "cluster-observability-operator/monitoring-console-plugin-rhel9",
"product": "Cluster Observability Operator 1.5.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782838476",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cluster_observability_operator:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9",
"product": "Cluster Observability Operator 1.5.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782839996",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cluster_observability_operator:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9",
"product": "Cluster Observability Operator 1.5.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782839494",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhdh:1.10::el9"
],
"defaultStatus": "affected",
"packageName": "rhdh/rhdh-hub-rhel9",
"product": "Red Hat Developer Hub 1.10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783448184",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhdh:1.9::el9"
],
"defaultStatus": "affected",
"packageName": "rhdh/rhdh-hub-rhel9",
"product": "Red Hat Developer Hub 1.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782761244",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:discovery:2::el9"
],
"defaultStatus": "affected",
"packageName": "discovery/discovery-ui-rhel9",
"product": "Red Hat Discovery 2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782166952",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhmt:1.8::el8"
],
"defaultStatus": "affected",
"packageName": "rhmtc/openshift-migration-ui-rhel8",
"product": "Red Hat Migration Toolkit 1.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783690532",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/cephcsi-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783676191",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/cephcsi-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783929816",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/mcg-core-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784094353",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/mcg-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784093953",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-client-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784094943",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-client-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783676585",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-metrics-exporter-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783676649",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783676675",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cli-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784094299",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784094725",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cosi-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783676820",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-csi-addons-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783676883",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-csi-addons-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783676894",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-multicluster-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784095175",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-multicluster-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783676977",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-must-gather-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784093503",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783677297",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odr-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783677345",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/rook-ceph-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783677533",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/cephcsi-rhel9",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783684360",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/cephcsi-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783684068",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/mcg-core-rhel9",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784054582",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/mcg-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784054606",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-client-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784055295",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-client-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783684603",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-metrics-exporter-rhel9",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783684668",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783684667",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cli-rhel9",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784054873",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cloudnative-pg-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783684707",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784055589",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cosi-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783684779",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-csi-addons-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783684831",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-csi-addons-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783684839",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-multicluster-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784055533",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-multicluster-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784055558",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-must-gather-rhel9",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784056134",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783685128",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odr-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783685129",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/rook-ceph-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783685375",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/cephcsi-rhel9",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783667125",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/cephcsi-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783666755",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/mcg-core-rhel9",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784054598",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/mcg-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784055387",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-client-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784055726",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-client-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783667517",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-metrics-exporter-rhel9",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783667577",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783667611",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cli-rhel9",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784055020",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cloudnative-pg-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783667641",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784055586",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cosi-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783667790",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-csi-addons-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783667859",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-csi-addons-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783667875",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-external-snapshotter-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783667869",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-external-snapshotter-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783667877",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-multicluster-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784055576",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-multicluster-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784055244",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-must-gather-rhel9",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784055382",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783668266",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odr-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783668288",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/rook-ceph-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783669219",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_devspaces:3.29::el9"
],
"defaultStatus": "affected",
"packageName": "devspaces/code-rhel9",
"product": "Red Hat OpenShift Dev Spaces 3.29",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782498475",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_devspaces:3.29::el9"
],
"defaultStatus": "affected",
"packageName": "devspaces/dashboard-rhel9",
"product": "Red Hat OpenShift Dev Spaces 3.29",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782498792",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:2.6::el8"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-ossmc-rhel8",
"product": "Red Hat OpenShift Service Mesh 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1781937133",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:2.6::el8"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-rhel8",
"product": "Red Hat OpenShift Service Mesh 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782287580",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.0::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782201894",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.0::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782201833",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.1::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782201696",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.1::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782201537",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782201851",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782201812",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782231869",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782201466",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/rekor-search-ui-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783327185",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:cryostat:4"
],
"defaultStatus": "unaffected",
"packageName": "cryostat-openshift-console-plugin-npm",
"product": "Cryostat 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:cryostat:4"
],
"defaultStatus": "unaffected",
"packageName": "grafana-infinity-datasource-npm",
"product": "Cryostat 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:cryostat:4"
],
"defaultStatus": "unaffected",
"packageName": "ws",
"product": "Cryostat 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:gatekeeper:3"
],
"defaultStatus": "unaffected",
"packageName": "gatekeeper/gatekeeper-rhel9",
"product": "Gatekeeper 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:workload_availability_nhc:0"
],
"defaultStatus": "affected",
"packageName": "workload-availability/node-healthcheck-must-gather-rhel9",
"product": "Node HealthCheck Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:workload_availability_nhc:0"
],
"defaultStatus": "affected",
"packageName": "workload-availability/node-healthcheck-operator-bundle",
"product": "Node HealthCheck Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:workload_availability_nhc:0"
],
"defaultStatus": "affected",
"packageName": "workload-availability/node-healthcheck-rhel9-operator",
"product": "Node HealthCheck Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_lightspeed"
],
"defaultStatus": "affected",
"packageName": "openshift-lightspeed/lightspeed-console-plugin-419-rhel9",
"product": "OpenShift Lightspeed",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_lightspeed"
],
"defaultStatus": "affected",
"packageName": "openshift-lightspeed/lightspeed-console-plugin-pf5-rhel9",
"product": "OpenShift Lightspeed",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_lightspeed"
],
"defaultStatus": "affected",
"packageName": "openshift-lightspeed/lightspeed-console-plugin-rhel9",
"product": "OpenShift Lightspeed",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines/pipelines-console-plugin-pf5-rhel9",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines/pipelines-console-plugin-rhel8",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines/pipelines-console-plugin-rhel9",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines/pipelines-hub-ui-rhel8",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines/pipelines-hub-ui-rhel9",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:3"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/kiali-operator-bundle",
"product": "OpenShift Service Mesh 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:3"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/kiali-rhel9-operator",
"product": "OpenShift Service Mesh 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:amq_broker:7"
],
"defaultStatus": "affected",
"packageName": "ws",
"product": "Red Hat AMQ Broker 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform-24/lightspeed-rhel8",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform-25/lightspeed-rhel8",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "ansible-automation-platform-26/gateway-rhel9",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform-26/lightspeed-rhel9",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "ansible-automation-platform-27/gateway-rhel9",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform-27/lightspeed-rhel9",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "affected",
"packageName": "automation-controller",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "automation-eda-controller",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:camel_spring_boot:4"
],
"defaultStatus": "unaffected",
"packageName": "ws",
"product": "Red Hat build of Apache Camel for Spring Boot 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:apache_camel_hawtio:4"
],
"defaultStatus": "affected",
"packageName": "ws",
"product": "Red Hat build of Apache Camel - HawtIO 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:build_keycloak:"
],
"defaultStatus": "unaffected",
"packageName": "ws",
"product": "Red Hat Build of Keycloak",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:podman_desktop:1"
],
"defaultStatus": "affected",
"packageName": "rh-podman-desktop.git",
"product": "Red Hat Build of Podman Desktop",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:podman_desktop:0"
],
"defaultStatus": "affected",
"packageName": "rhdesktop/rh-podman-desktop-ext-bootc-rhel10",
"product": "Red Hat Build of Podman Desktop - Tech Preview",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:podman_desktop:0"
],
"defaultStatus": "affected",
"packageName": "rhdesktop/rh-podman-desktop-ext-rhel-rhel10",
"product": "Red Hat Build of Podman Desktop - Tech Preview",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:podman_desktop:0"
],
"defaultStatus": "affected",
"packageName": "rhdesktop/rh-podman-desktop-ext-sandbox-rhel10",
"product": "Red Hat Build of Podman Desktop - Tech Preview",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:connectivity_link:1"
],
"defaultStatus": "affected",
"packageName": "rhcl-1/rhcl-console-plugin-rhel9",
"product": "Red Hat Connectivity Link 1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_data_grid:8"
],
"defaultStatus": "unaffected",
"packageName": "ws",
"product": "Red Hat Data Grid 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "dotnet8.0",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unknown",
"packageName": "dotnet9.0",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "pcs",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "rust",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "dotnet5.0-build-reference-packages",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "dotnet8.0",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "dotnet9.0",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "grafana",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "grafana-pcp",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "mozjs60",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "pcs",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "rust",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "thunderbird",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "ceph",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "dotnet8.0",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unknown",
"packageName": "dotnet9.0",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "gjs",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "pcs",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "rust",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3"
],
"defaultStatus": "affected",
"packageName": "rhelai3/bootc-cuda-rhel9",
"product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3"
],
"defaultStatus": "affected",
"packageName": "rhelai3/bootc-gaudi-rhel9",
"product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3"
],
"defaultStatus": "affected",
"packageName": "rhelai3/bootc-rocm-rhel9",
"product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3"
],
"defaultStatus": "affected",
"packageName": "rhelai3/disk-image-cuda-rhel9",
"product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3"
],
"defaultStatus": "affected",
"packageName": "rust",
"product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3"
],
"defaultStatus": "affected",
"packageName": "thrift",
"product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_fuse:7"
],
"defaultStatus": "affected",
"packageName": "ws",
"product": "Red Hat Fuse 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:hummingbird:1"
],
"defaultStatus": "unaffected",
"packageName": "dotnet10.0",
"product": "Red Hat Hardened Images",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:hummingbird:1"
],
"defaultStatus": "unaffected",
"packageName": "dotnet8.0",
"product": "Red Hat Hardened Images",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:hummingbird:1"
],
"defaultStatus": "unaffected",
"packageName": "dotnet9.0",
"product": "Red Hat Hardened Images",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:hummingbird:1"
],
"defaultStatus": "unaffected",
"packageName": "ruff",
"product": "Red Hat Hardened Images",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:hummingbird:1"
],
"defaultStatus": "unaffected",
"packageName": "rust",
"product": "Red Hat Hardened Images",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:hummingbird:1"
],
"defaultStatus": "unaffected",
"packageName": "yarnpkg",
"product": "Red Hat Hardened Images",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_enterprise_application_platform:8"
],
"defaultStatus": "unaffected",
"packageName": "ws",
"product": "Red Hat JBoss Enterprise Application Platform 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jbosseapxp"
],
"defaultStatus": "unaffected",
"packageName": "ws",
"product": "Red Hat JBoss Enterprise Application Platform Expansion Pack",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-dashboard-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-mlflow-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-automl-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-autorag-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-eval-hub-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-gen-ai-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-maas-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-mod-arch-mlflow-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-model-registry-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-agent-installer-ui-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-console",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-console-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-monitoring-plugin-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "unaffected",
"packageName": "container-native-virtualization/kubevirt-console-plugin",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "unaffected",
"packageName": "container-native-virtualization/kubevirt-console-plugin-rhel9",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:quay:3"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6"
],
"defaultStatus": "affected",
"packageName": "satellite/iop-vulnerability-frontend-rhel9",
"product": "Red Hat Satellite 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_portal:2"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform/automation-portal",
"product": "Self-service automation portal 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_portal:2"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform/bootc-automation-portal-rhel9",
"product": "Self-service automation portal 2",
"vendor": "Red Hat"
}
],
"datePublic": "2026-06-16T21:26:22.537Z",
"descriptions": [
{
"lang": "en",
"value": "A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that consume excessive memory. Consequently, this leads to process termination and a denial of service (DoS) for the remote peer."
}
],
"metrics": [
{
"other": {
"content": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"value": "Important"
},
"type": "Red Hat severity rating"
}
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-1050",
"description": "Excessive Platform Resource Consumption within a Loop",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-04T12:07:12.477Z",
"orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"shortName": "redhat-SADP"
},
"references": [
{
"tags": [
"vdb-entry",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/security/cve/CVE-2026-48779"
},
{
"name": "RHBZ#2489661",
"tags": [
"issue-tracking",
"x_refsource_REDHAT"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489661"
},
{
"tags": [
"x_sadp-csaf-vex"
],
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48779.json"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33574"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:29197"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36820"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33155"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33160"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33163"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33173"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33183"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41941"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41944"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:40984"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:37272"
}
],
"solutions": [
{
"lang": "en",
"value": "RHSA-2026:48151: Cryostat 4 on RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:34342: Cluster Observability Operator 1.5.0"
},
{
"lang": "en",
"value": "RHSA-2026:36754: Red Hat Developer Hub 1.10"
},
{
"lang": "en",
"value": "RHSA-2026:33574: Red Hat Developer Hub 1.9"
},
{
"lang": "en",
"value": "RHSA-2026:29197: Red Hat Discovery 2"
},
{
"lang": "en",
"value": "RHSA-2026:41928: Red Hat Migration Toolkit 1.8"
},
{
"lang": "en",
"value": "RHSA-2026:36820: Red Hat OpenShift Dev Spaces 3.29"
},
{
"lang": "en",
"value": "RHSA-2026:33155: Red Hat OpenShift Service Mesh 2.6"
},
{
"lang": "en",
"value": "RHSA-2026:33160: Red Hat OpenShift Service Mesh 3.0"
},
{
"lang": "en",
"value": "RHSA-2026:33163: Red Hat OpenShift Service Mesh 3.1"
},
{
"lang": "en",
"value": "RHSA-2026:33173: Red Hat OpenShift Service Mesh 3.2"
},
{
"lang": "en",
"value": "RHSA-2026:33183: Red Hat OpenShift Service Mesh 3.3"
},
{
"lang": "en",
"value": "RHSA-2026:41941: Red Hat Openshift Data Foundation 4.18"
},
{
"lang": "en",
"value": "RHSA-2026:41944: Red Hat Openshift Data Foundation 4.19"
},
{
"lang": "en",
"value": "RHSA-2026:40984: Red Hat Openshift Data Foundation 4.2"
},
{
"lang": "en",
"value": "RHSA-2026:37272: Red Hat Trusted Artifact Signer 1.4"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-06-16T22:01:24.571Z",
"value": "Reported to Red Hat."
},
{
"lang": "en",
"time": "2026-06-16T21:26:22.537Z",
"value": "Made public."
}
],
"title": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments",
"workarounds": [
{
"lang": "en",
"value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."
}
],
"x_adpType": "supplier",
"x_generator": {
"engine": "sadp-cli 1.0.0"
}
}
],
"cna": {
"affected": [
{
"product": "ws",
"vendor": "websockets",
"versions": [
{
"status": "affected",
"version": "\u003e= 1.1.0, \u003c 5.2.5"
},
{
"status": "affected",
"version": "\u003e= 6.0.0, \u003c 6.2.4"
},
{
"status": "affected",
"version": "\u003e= 7.0.0, \u003c 7.5.11"
},
{
"status": "affected",
"version": "\u003e= 8.0.0, \u003c 8.21.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "ws is an open source WebSocket client and server for Node.js. All versions from 1.1.0 up to (but not including) 5.2.5, from 6.0.0 up to 6.2.4, from 7.0.0 up to 7.5.11, and from 8.0.0 up to 8.21.0 are affected by a memory exhaustion DoS vulnerability. A peer can send a high volume of exceptionally small fragments and data chunks, with modest network traffic, to force the remote peer into allocating and holding structural wrappers that consume far more memory than the default documented message-size limit, leading to process termination due to OOM. This issue has been fixed in versions 5.2.5, 6.2.4, 7.5.11, and 8.21.0."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-400",
"description": "CWE-400: Uncontrolled Resource Consumption",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-770",
"description": "CWE-770: Allocation of Resources Without Limits or Throttling",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-16T21:26:22.537Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p"
},
{
"name": "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7"
},
{
"name": "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53"
},
{
"name": "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94"
},
{
"name": "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8"
}
],
"source": {
"advisory": "GHSA-96hv-2xvq-fx4p",
"discovery": "UNKNOWN"
},
"title": "ws: Memory exhaustion DoS from tiny fragments and data chunks"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-48779",
"datePublished": "2026-06-16T21:26:22.537Z",
"dateReserved": "2026-05-22T20:18:20.365Z",
"dateUpdated": "2026-08-04T12:07:12.477Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-48779",
"date": "2026-08-10",
"epss": "0.00782",
"percentile": "0.52591"
},
"microsoft_vex": {
"current_release_date": "2026-07-03T01:10:13.000Z",
"cve": "CVE-2026-48779",
"id": "msrc_CVE-2026-48779",
"initial_release_date": "2026-06-02T00:00:00.000Z",
"product_status:known_not_affected": "1",
"source": "Microsoft CSAF VEX",
"status": "final",
"title": "ws: Memory exhaustion DoS from tiny fragments and data chunks",
"url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-48779.json",
"version": "2"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2026-48779\",\"sourceIdentifier\":\"security-advisories@github.com\",\"published\":\"2026-06-17T13:20:42.887\",\"lastModified\":\"2026-08-03T13:18:43.067\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"ws is an open source WebSocket client and server for Node.js. All versions from 1.1.0 up to (but not including) 5.2.5, from 6.0.0 up to 6.2.4, from 7.0.0 up to 7.5.11, and from 8.0.0 up to 8.21.0 are affected by a memory exhaustion DoS vulnerability. A peer can send a high volume of exceptionally small fragments and data chunks, with modest network traffic, to force the remote peer into allocating and holding structural wrappers that consume far more memory than the default documented message-size limit, leading to process termination due to OOM. This issue has been fixed in versions 5.2.5, 6.2.4, 7.5.11, and 8.21.0.\"}],\"affected\":[{\"source\":\"security-advisories@github.com\",\"affectedData\":[{\"vendor\":\"websockets\",\"product\":\"ws\",\"versions\":[{\"version\":\"\u003e= 1.1.0, \u003c 5.2.5\",\"status\":\"affected\"},{\"version\":\"\u003e= 6.0.0, \u003c 6.2.4\",\"status\":\"affected\"},{\"version\":\"\u003e= 7.0.0, \u003c 7.5.11\",\"status\":\"affected\"},{\"version\":\"\u003e= 8.0.0, \u003c 8.21.0\",\"status\":\"affected\"}]}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"affectedData\":[{\"vendor\":\"Red Hat\",\"product\":\"Cryostat 4 on RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cryostat/cryostat-openshift-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:cryostat:4::el9\"],\"versions\":[{\"version\":\"4.2.0-13\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Cluster Observability Operator 1.5.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9\",\"cpes\":[\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"],\"versions\":[{\"version\":\"1782840519\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Cluster Observability Operator 1.5.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9\",\"cpes\":[\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"],\"versions\":[{\"version\":\"1782839981\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Cluster Observability Operator 1.5.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9\",\"cpes\":[\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"],\"versions\":[{\"version\":\"1782839193\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Cluster Observability Operator 1.5.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cluster-observability-operator/distributed-tracing-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"],\"versions\":[{\"version\":\"1782838753\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Cluster Observability Operator 1.5.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cluster-observability-operator/logging-console-plugin-pf4-rhel9\",\"cpes\":[\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"],\"versions\":[{\"version\":\"1782839279\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Cluster Observability Operator 1.5.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cluster-observability-operator/logging-console-plugin-pf5-rhel9\",\"cpes\":[\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"],\"versions\":[{\"version\":\"1782840539\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Cluster Observability Operator 1.5.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cluster-observability-operator/logging-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"],\"versions\":[{\"version\":\"1782841925\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Cluster Observability Operator 1.5.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cluster-observability-operator/monitoring-console-plugin-pf5-rhel9\",\"cpes\":[\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"],\"versions\":[{\"version\":\"1782844225\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Cluster Observability Operator 1.5.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cluster-observability-operator/monitoring-console-plugin-pf6-rhel9\",\"cpes\":[\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"],\"versions\":[{\"version\":\"1782839658\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Cluster Observability Operator 1.5.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cluster-observability-operator/monitoring-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"],\"versions\":[{\"version\":\"1782838476\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Cluster Observability Operator 1.5.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9\",\"cpes\":[\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"],\"versions\":[{\"version\":\"1782839996\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Cluster Observability Operator 1.5.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"],\"versions\":[{\"version\":\"1782839494\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Developer Hub 1.10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhdh/rhdh-hub-rhel9\",\"cpes\":[\"cpe:/a:redhat:rhdh:1.10::el9\"],\"versions\":[{\"version\":\"1783448184\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Developer Hub 1.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhdh/rhdh-hub-rhel9\",\"cpes\":[\"cpe:/a:redhat:rhdh:1.9::el9\"],\"versions\":[{\"version\":\"1782761244\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Discovery 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"discovery/discovery-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:discovery:2::el9\"],\"versions\":[{\"version\":\"1782166952\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Migration Toolkit 1.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhmtc/openshift-migration-ui-rhel8\",\"cpes\":[\"cpe:/a:redhat:rhmt:1.8::el8\"],\"versions\":[{\"version\":\"1783690532\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/cephcsi-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1783676191\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/cephcsi-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1783929816\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/mcg-core-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1784094353\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/mcg-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1784093953\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-client-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1784094943\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-client-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1783676585\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-metrics-exporter-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1783676649\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1783676675\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1784094299\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1784094725\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cosi-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1783676820\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-csi-addons-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1783676883\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-csi-addons-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1783676894\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-multicluster-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1784095175\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-multicluster-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1783676977\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1784093503\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1783677297\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odr-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1783677345\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/rook-ceph-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1783677533\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/cephcsi-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1783684360\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/cephcsi-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1783684068\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/mcg-core-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1784054582\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/mcg-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1784054606\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-client-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1784055295\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-client-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1783684603\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-metrics-exporter-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1783684668\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1783684667\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1784054873\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cloudnative-pg-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1783684707\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1784055589\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cosi-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1783684779\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-csi-addons-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1783684831\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-csi-addons-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1783684839\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-multicluster-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1784055533\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-multicluster-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1784055558\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1784056134\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1783685128\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odr-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1783685129\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/rook-ceph-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1783685375\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/cephcsi-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1783667125\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/cephcsi-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1783666755\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/mcg-core-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1784054598\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/mcg-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1784055387\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-client-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1784055726\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-client-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1783667517\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-metrics-exporter-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1783667577\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1783667611\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1784055020\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cloudnative-pg-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1783667641\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1784055586\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cosi-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1783667790\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-csi-addons-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1783667859\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-csi-addons-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1783667875\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-external-snapshotter-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1783667869\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-external-snapshotter-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1783667877\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-multicluster-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1784055576\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-multicluster-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1784055244\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1784055382\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1783668266\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odr-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1783668288\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/rook-ceph-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1783669219\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Dev Spaces 3.29\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"devspaces/code-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_devspaces:3.29::el9\"],\"versions\":[{\"version\":\"1782498475\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Dev Spaces 3.29\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"devspaces/dashboard-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_devspaces:3.29::el9\"],\"versions\":[{\"version\":\"1782498792\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-ossmc-rhel8\",\"cpes\":[\"cpe:/a:redhat:service_mesh:2.6::el8\"],\"versions\":[{\"version\":\"1781937133\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-rhel8\",\"cpes\":[\"cpe:/a:redhat:service_mesh:2.6::el8\"],\"versions\":[{\"version\":\"1782287580\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-ossmc-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.0::el9\"],\"versions\":[{\"version\":\"1782201894\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.0::el9\"],\"versions\":[{\"version\":\"1782201833\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-ossmc-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.1::el9\"],\"versions\":[{\"version\":\"1782201696\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.1::el9\"],\"versions\":[{\"version\":\"1782201537\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-ossmc-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.2::el9\"],\"versions\":[{\"version\":\"1782201851\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.2::el9\"],\"versions\":[{\"version\":\"1782201812\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-ossmc-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.3::el9\"],\"versions\":[{\"version\":\"1782231869\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.3::el9\"],\"versions\":[{\"version\":\"1782201466\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/rekor-search-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"],\"versions\":[{\"version\":\"1783327185\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Cryostat 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"cryostat-openshift-console-plugin-npm\",\"cpes\":[\"cpe:/a:redhat:cryostat:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Cryostat 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana-infinity-datasource-npm\",\"cpes\":[\"cpe:/a:redhat:cryostat:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Cryostat 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ws\",\"cpes\":[\"cpe:/a:redhat:cryostat:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Gatekeeper 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"gatekeeper/gatekeeper-rhel9\",\"cpes\":[\"cpe:/a:redhat:gatekeeper:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Node HealthCheck Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"workload-availability/node-healthcheck-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:workload_availability_nhc:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Node HealthCheck Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"workload-availability/node-healthcheck-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:workload_availability_nhc:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Node HealthCheck Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"workload-availability/node-healthcheck-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:workload_availability_nhc:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Lightspeed\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-lightspeed/lightspeed-console-plugin-419-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_lightspeed\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Lightspeed\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-lightspeed/lightspeed-console-plugin-pf5-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_lightspeed\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Lightspeed\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-lightspeed/lightspeed-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_lightspeed\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines/pipelines-console-plugin-pf5-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines/pipelines-console-plugin-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines/pipelines-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines/pipelines-hub-ui-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines/pipelines-hub-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/kiali-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/kiali-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat AMQ Broker 7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ws\",\"cpes\":[\"cpe:/a:redhat:amq_broker:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform-24/lightspeed-rhel8\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform-25/lightspeed-rhel8\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform-26/gateway-rhel9\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform-26/lightspeed-rhel9\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform-27/gateway-rhel9\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform-27/lightspeed-rhel9\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-controller\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-eda-controller\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat build of Apache Camel for Spring Boot 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ws\",\"cpes\":[\"cpe:/a:redhat:camel_spring_boot:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat build of Apache Camel - HawtIO 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ws\",\"cpes\":[\"cpe:/a:redhat:apache_camel_hawtio:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Build of Keycloak\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ws\",\"cpes\":[\"cpe:/a:redhat:build_keycloak:\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Build of Podman Desktop\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rh-podman-desktop.git\",\"cpes\":[\"cpe:/a:redhat:podman_desktop:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Build of Podman Desktop - Tech Preview\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhdesktop/rh-podman-desktop-ext-bootc-rhel10\",\"cpes\":[\"cpe:/a:redhat:podman_desktop:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Build of Podman Desktop - Tech Preview\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhdesktop/rh-podman-desktop-ext-rhel-rhel10\",\"cpes\":[\"cpe:/a:redhat:podman_desktop:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Build of Podman Desktop - Tech Preview\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhdesktop/rh-podman-desktop-ext-sandbox-rhel10\",\"cpes\":[\"cpe:/a:redhat:podman_desktop:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Connectivity Link 1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhcl-1/rhcl-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:connectivity_link:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Data Grid 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ws\",\"cpes\":[\"cpe:/a:redhat:jboss_data_grid:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"dotnet8.0\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"dotnet9.0\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"pcs\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rust\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"dotnet5.0-build-reference-packages\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"dotnet8.0\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"dotnet9.0\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana-pcp\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"mozjs60\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"pcs\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rust\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"thunderbird\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ceph\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"dotnet8.0\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"dotnet9.0\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"gjs\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"pcs\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rust\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI (RHEL AI) 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhelai3/bootc-cuda-rhel9\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI (RHEL AI) 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhelai3/bootc-gaudi-rhel9\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI (RHEL AI) 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhelai3/bootc-rocm-rhel9\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI (RHEL AI) 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhelai3/disk-image-cuda-rhel9\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI (RHEL AI) 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rust\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI (RHEL AI) 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"thrift\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Fuse 7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ws\",\"cpes\":[\"cpe:/a:redhat:jboss_fuse:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Hardened Images\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"dotnet10.0\",\"cpes\":[\"cpe:/a:redhat:hummingbird:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Hardened Images\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"dotnet8.0\",\"cpes\":[\"cpe:/a:redhat:hummingbird:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Hardened Images\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"dotnet9.0\",\"cpes\":[\"cpe:/a:redhat:hummingbird:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Hardened Images\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ruff\",\"cpes\":[\"cpe:/a:redhat:hummingbird:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Hardened Images\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rust\",\"cpes\":[\"cpe:/a:redhat:hummingbird:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Hardened Images\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"yarnpkg\",\"cpes\":[\"cpe:/a:redhat:hummingbird:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat JBoss Enterprise Application Platform 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ws\",\"cpes\":[\"cpe:/a:redhat:jboss_enterprise_application_platform:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat JBoss Enterprise Application Platform Expansion Pack\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ws\",\"cpes\":[\"cpe:/a:redhat:jbosseapxp\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-dashboard-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mlflow-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-automl-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-autorag-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-eval-hub-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-gen-ai-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-maas-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-mlflow-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-model-registry-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-agent-installer-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-console\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-monitoring-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-native-virtualization/kubevirt-console-plugin\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-native-virtualization/kubevirt-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"quay/quay-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"satellite/iop-vulnerability-frontend-rhel9\",\"cpes\":[\"cpe:/a:redhat:satellite:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Self-service automation portal 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform/automation-portal\",\"cpes\":[\"cpe:/a:redhat:ansible_portal:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Self-service automation portal 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform/bootc-automation-portal-rhel9\",\"cpes\":[\"cpe:/a:redhat:ansible_portal:2\"]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"security-advisories@github.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-06-17T18:07:28.748295Z\",\"id\":\"CVE-2026-48779\",\"options\":[{\"exploitation\":\"poc\"},{\"automatable\":\"yes\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"security-advisories@github.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-400\"},{\"lang\":\"en\",\"value\":\"CWE-770\"}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-1050\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ws_project:ws:*:*:*:*:*:node.js:*:*\",\"versionStartIncluding\":\"1.1.0\",\"versionEndExcluding\":\"5.2.5\",\"matchCriteriaId\":\"0996A87C-D0FF-4A0D-946F-172476CE8742\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ws_project:ws:*:*:*:*:*:node.js:*:*\",\"versionStartIncluding\":\"6.0.0\",\"versionEndExcluding\":\"6.2.4\",\"matchCriteriaId\":\"DE37962C-D077-4D0E-A9C4-4E6F6C62F80F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ws_project:ws:*:*:*:*:*:node.js:*:*\",\"versionStartIncluding\":\"7.0.0\",\"versionEndExcluding\":\"7.5.11\",\"matchCriteriaId\":\"6220326D-EDFB-451F-AE2F-303CDA363061\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ws_project:ws:*:*:*:*:*:node.js:*:*\",\"versionStartIncluding\":\"8.0.0\",\"versionEndExcluding\":\"8.21.0\",\"matchCriteriaId\":\"1EE3B45F-FC9D-485E-9731-AC93F3730B40\"}]}]}],\"references\":[{\"url\":\"https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Exploit\",\"Mitigation\",\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:29197\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33155\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33160\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33163\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33173\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33183\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33574\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34342\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36754\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36820\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:37272\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:40984\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41928\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41941\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41944\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:48151\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/security/cve/CVE-2026-48779\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2489661\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p\",\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"tags\":[\"Exploit\",\"Mitigation\",\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48779.json\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"}]}}",
"redhat_vex": {
"aggregate_severity": "Important",
"current_release_date": "2026-08-04T04:16:23+00:00",
"cve": "CVE-2026-48779",
"id": "CVE-2026-48779",
"initial_release_date": "2026-06-16T21:26:22.537000+00:00",
"product_status:fixed": "338",
"product_status:known_affected": "49",
"product_status:known_not_affected": "366",
"product_status:under_investigation": "30",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48779.json",
"version": "3"
},
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments\", \"metrics\": [{\"other\": {\"type\": \"Red Hat severity rating\", \"content\": {\"value\": \"Important\", \"namespace\": \"https://access.redhat.com/security/updates/classification/\"}}}, {\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}], \"affected\": [{\"cpes\": [\"cpe:/a:redhat:cryostat:4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cryostat 4 on RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"4.2.0-13\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cryostat/cryostat-openshift-console-plugin-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cluster Observability Operator 1.5.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782840519\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cluster Observability Operator 1.5.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782839981\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cluster Observability Operator 1.5.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782839193\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cluster Observability Operator 1.5.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782838753\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cluster-observability-operator/distributed-tracing-console-plugin-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cluster Observability Operator 1.5.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782839279\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cluster-observability-operator/logging-console-plugin-pf4-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cluster Observability Operator 1.5.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782840539\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cluster-observability-operator/logging-console-plugin-pf5-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cluster Observability Operator 1.5.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782841925\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cluster-observability-operator/logging-console-plugin-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cluster Observability Operator 1.5.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782844225\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cluster-observability-operator/monitoring-console-plugin-pf5-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cluster Observability Operator 1.5.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782839658\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cluster-observability-operator/monitoring-console-plugin-pf6-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cluster Observability Operator 1.5.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782838476\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cluster-observability-operator/monitoring-console-plugin-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cluster Observability Operator 1.5.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782839996\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cluster Observability Operator 1.5.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782839494\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhdh:1.10::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Developer Hub 1.10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783448184\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhdh/rhdh-hub-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhdh:1.9::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Developer Hub 1.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782761244\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhdh/rhdh-hub-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:discovery:2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Discovery 2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782166952\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"discovery/discovery-ui-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhmt:1.8::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Migration Toolkit 1.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783690532\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhmtc/openshift-migration-ui-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783676191\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/cephcsi-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783929816\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/cephcsi-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784094353\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/mcg-core-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784093953\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/mcg-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784094943\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-client-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783676585\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-client-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783676649\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-metrics-exporter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783676675\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784094299\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cli-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784094725\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783676820\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cosi-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783676883\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-csi-addons-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783676894\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-csi-addons-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784095175\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-multicluster-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783676977\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-multicluster-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784093503\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-must-gather-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783677297\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783677345\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odr-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783677533\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/rook-ceph-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783684360\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/cephcsi-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783684068\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/cephcsi-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784054582\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/mcg-core-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784054606\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/mcg-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784055295\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-client-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783684603\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-client-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783684668\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-metrics-exporter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783684667\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784054873\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cli-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783684707\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cloudnative-pg-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784055589\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783684779\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cosi-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783684831\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-csi-addons-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783684839\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-csi-addons-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784055533\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-multicluster-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784055558\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-multicluster-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784056134\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-must-gather-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783685128\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783685129\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odr-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783685375\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/rook-ceph-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783667125\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/cephcsi-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783666755\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/cephcsi-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784054598\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/mcg-core-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784055387\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/mcg-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784055726\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-client-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783667517\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-client-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783667577\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-metrics-exporter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783667611\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784055020\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cli-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783667641\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cloudnative-pg-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784055586\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783667790\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cosi-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783667859\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-csi-addons-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783667875\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-csi-addons-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783667869\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-external-snapshotter-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783667877\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-external-snapshotter-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784055576\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-multicluster-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784055244\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-multicluster-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784055382\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-must-gather-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783668266\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783668288\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odr-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783669219\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/rook-ceph-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_devspaces:3.29::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Dev Spaces 3.29\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782498475\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"devspaces/code-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_devspaces:3.29::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Dev Spaces 3.29\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782498792\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"devspaces/dashboard-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:2.6::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1781937133\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-ossmc-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:2.6::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782287580\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782201894\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-ossmc-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782201833\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782201696\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-ossmc-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782201537\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782201851\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-ossmc-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782201812\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782231869\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-ossmc-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782201466\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783327185\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/rekor-search-ui-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cryostat:4\"], \"vendor\": \"Red Hat\", \"product\": \"Cryostat 4\", \"packageName\": \"cryostat-openshift-console-plugin-npm\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:cryostat:4\"], \"vendor\": \"Red Hat\", \"product\": \"Cryostat 4\", \"packageName\": \"grafana-infinity-datasource-npm\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:cryostat:4\"], \"vendor\": \"Red Hat\", \"product\": \"Cryostat 4\", \"packageName\": \"ws\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:gatekeeper:3\"], \"vendor\": \"Red Hat\", \"product\": \"Gatekeeper 3\", \"packageName\": \"gatekeeper/gatekeeper-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_nhc:0\"], \"vendor\": \"Red Hat\", \"product\": \"Node HealthCheck Operator\", \"packageName\": \"workload-availability/node-healthcheck-must-gather-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_nhc:0\"], \"vendor\": \"Red Hat\", \"product\": \"Node HealthCheck Operator\", \"packageName\": \"workload-availability/node-healthcheck-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_nhc:0\"], \"vendor\": \"Red Hat\", \"product\": \"Node HealthCheck Operator\", \"packageName\": \"workload-availability/node-healthcheck-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_lightspeed\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Lightspeed\", \"packageName\": \"openshift-lightspeed/lightspeed-console-plugin-419-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_lightspeed\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Lightspeed\", \"packageName\": \"openshift-lightspeed/lightspeed-console-plugin-pf5-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_lightspeed\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Lightspeed\", \"packageName\": \"openshift-lightspeed/lightspeed-console-plugin-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"packageName\": \"openshift-pipelines/pipelines-console-plugin-pf5-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"packageName\": \"openshift-pipelines/pipelines-console-plugin-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"packageName\": \"openshift-pipelines/pipelines-console-plugin-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"packageName\": \"openshift-pipelines/pipelines-hub-ui-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"packageName\": \"openshift-pipelines/pipelines-hub-ui-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 3\", \"packageName\": \"openshift-service-mesh/kiali-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 3\", \"packageName\": \"openshift-service-mesh/kiali-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:amq_broker:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat AMQ Broker 7\", \"packageName\": \"ws\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"ansible-automation-platform-24/lightspeed-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"ansible-automation-platform-25/lightspeed-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"ansible-automation-platform-26/gateway-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"ansible-automation-platform-26/lightspeed-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"ansible-automation-platform-27/gateway-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"ansible-automation-platform-27/lightspeed-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"automation-controller\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"automation-eda-controller\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:camel_spring_boot:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat build of Apache Camel for Spring Boot 4\", \"packageName\": \"ws\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:apache_camel_hawtio:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat build of Apache Camel - HawtIO 4\", \"packageName\": \"ws\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:build_keycloak:\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Build of Keycloak\", \"packageName\": \"ws\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:podman_desktop:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Build of Podman Desktop\", \"packageName\": \"rh-podman-desktop.git\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:podman_desktop:0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Build of Podman Desktop - Tech Preview\", \"packageName\": \"rhdesktop/rh-podman-desktop-ext-bootc-rhel10\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:podman_desktop:0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Build of Podman Desktop - Tech Preview\", \"packageName\": \"rhdesktop/rh-podman-desktop-ext-rhel-rhel10\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:podman_desktop:0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Build of Podman Desktop - Tech Preview\", \"packageName\": \"rhdesktop/rh-podman-desktop-ext-sandbox-rhel10\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:connectivity_link:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Connectivity Link 1\", \"packageName\": \"rhcl-1/rhcl-console-plugin-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_data_grid:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Data Grid 8\", \"packageName\": \"ws\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"dotnet8.0\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"dotnet9.0\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"pcs\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"rust\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"dotnet5.0-build-reference-packages\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"dotnet8.0\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"dotnet9.0\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"grafana\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"grafana-pcp\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"mozjs60\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"pcs\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"rust\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"thunderbird\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"ceph\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"dotnet8.0\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"dotnet9.0\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"gjs\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"pcs\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"rust\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI (RHEL AI) 3\", \"packageName\": \"rhelai3/bootc-cuda-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI (RHEL AI) 3\", \"packageName\": \"rhelai3/bootc-gaudi-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI (RHEL AI) 3\", \"packageName\": \"rhelai3/bootc-rocm-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI (RHEL AI) 3\", \"packageName\": \"rhelai3/disk-image-cuda-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI (RHEL AI) 3\", \"packageName\": \"rust\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI (RHEL AI) 3\", \"packageName\": \"thrift\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_fuse:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Fuse 7\", \"packageName\": \"ws\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:hummingbird:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Hardened Images\", \"packageName\": \"dotnet10.0\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:hummingbird:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Hardened Images\", \"packageName\": \"dotnet8.0\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:hummingbird:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Hardened Images\", \"packageName\": \"dotnet9.0\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:hummingbird:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Hardened Images\", \"packageName\": \"ruff\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:hummingbird:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Hardened Images\", \"packageName\": \"rust\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:hummingbird:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Hardened Images\", \"packageName\": \"yarnpkg\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_enterprise_application_platform:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat JBoss Enterprise Application Platform 8\", \"packageName\": \"ws\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:jbosseapxp\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat JBoss Enterprise Application Platform Expansion Pack\", \"packageName\": \"ws\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-dashboard-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mlflow-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-automl-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-autorag-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-eval-hub-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-gen-ai-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-maas-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-mlflow-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-model-registry-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-agent-installer-ui-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-console\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-console-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-monitoring-plugin-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"container-native-virtualization/kubevirt-console-plugin\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"container-native-virtualization/kubevirt-console-plugin-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3\", \"packageName\": \"quay/quay-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6\", \"packageName\": \"satellite/iop-vulnerability-frontend-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_portal:2\"], \"vendor\": \"Red Hat\", \"product\": \"Self-service automation portal 2\", \"packageName\": \"ansible-automation-platform/automation-portal\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_portal:2\"], \"vendor\": \"Red Hat\", \"product\": \"Self-service automation portal 2\", \"packageName\": \"ansible-automation-platform/bootc-automation-portal-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-06-16T22:01:24.571Z\", \"value\": \"Reported to Red Hat.\"}, {\"lang\": \"en\", \"time\": \"2026-06-16T21:26:22.537Z\", \"value\": \"Made public.\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"RHSA-2026:48151: Cryostat 4 on RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34342: Cluster Observability Operator 1.5.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36754: Red Hat Developer Hub 1.10\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33574: Red Hat Developer Hub 1.9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:29197: Red Hat Discovery 2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41928: Red Hat Migration Toolkit 1.8\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36820: Red Hat OpenShift Dev Spaces 3.29\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33155: Red Hat OpenShift Service Mesh 2.6\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33160: Red Hat OpenShift Service Mesh 3.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33163: Red Hat OpenShift Service Mesh 3.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33173: Red Hat OpenShift Service Mesh 3.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33183: Red Hat OpenShift Service Mesh 3.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41941: Red Hat Openshift Data Foundation 4.18\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41944: Red Hat Openshift Data Foundation 4.19\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:40984: Red Hat Openshift Data Foundation 4.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:37272: Red Hat Trusted Artifact Signer 1.4\"}], \"x_adpType\": \"supplier\", \"datePublic\": \"2026-06-16T21:26:22.537Z\", \"references\": [{\"url\": \"https://access.redhat.com/security/cve/CVE-2026-48779\", \"tags\": [\"vdb-entry\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=2489661\", \"name\": \"RHBZ#2489661\", \"tags\": [\"issue-tracking\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48779.json\", \"tags\": [\"x_sadp-csaf-vex\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:48151\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34342\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36754\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33574\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:29197\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41928\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36820\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33155\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33160\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33163\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33173\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33183\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41941\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41944\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:40984\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:37272\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}], \"workarounds\": [{\"lang\": \"en\", \"value\": \"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.\"}], \"x_generator\": {\"engine\": \"sadp-cli 1.0.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that consume excessive memory. Consequently, this leads to process termination and a denial of service (DoS) for the remote peer.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-1050\", \"description\": \"Excessive Platform Resource Consumption within a Loop\"}]}], \"providerMetadata\": {\"orgId\": \"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\", \"shortName\": \"redhat-SADP\", \"dateUpdated\": \"2026-08-03T12:05:49.378Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-48779\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"poc\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-06-17T18:07:28.748295Z\"}}}], \"references\": [{\"url\": \"https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p\", \"tags\": [\"exploit\"]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-06-17T18:07:47.408Z\"}}], \"cna\": {\"title\": \"ws: Memory exhaustion DoS from tiny fragments and data chunks\", \"source\": {\"advisory\": \"GHSA-96hv-2xvq-fx4p\", \"discovery\": \"UNKNOWN\"}, \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}], \"affected\": [{\"vendor\": \"websockets\", \"product\": \"ws\", \"versions\": [{\"status\": \"affected\", \"version\": \"\u003e= 1.1.0, \u003c 5.2.5\"}, {\"status\": \"affected\", \"version\": \"\u003e= 6.0.0, \u003c 6.2.4\"}, {\"status\": \"affected\", \"version\": \"\u003e= 7.0.0, \u003c 7.5.11\"}, {\"status\": \"affected\", \"version\": \"\u003e= 8.0.0, \u003c 8.21.0\"}]}], \"references\": [{\"url\": \"https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p\", \"name\": \"https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p\", \"tags\": [\"x_refsource_CONFIRM\"]}, {\"url\": \"https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7\", \"name\": \"https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53\", \"name\": \"https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94\", \"name\": \"https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8\", \"name\": \"https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8\", \"tags\": [\"x_refsource_MISC\"]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"ws is an open source WebSocket client and server for Node.js. All versions from 1.1.0 up to (but not including) 5.2.5, from 6.0.0 up to 6.2.4, from 7.0.0 up to 7.5.11, and from 8.0.0 up to 8.21.0 are affected by a memory exhaustion DoS vulnerability. A peer can send a high volume of exceptionally small fragments and data chunks, with modest network traffic, to force the remote peer into allocating and holding structural wrappers that consume far more memory than the default documented message-size limit, leading to process termination due to OOM. This issue has been fixed in versions 5.2.5, 6.2.4, 7.5.11, and 8.21.0.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-400\", \"description\": \"CWE-400: Uncontrolled Resource Consumption\"}]}, {\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-770\", \"description\": \"CWE-770: Allocation of Resources Without Limits or Throttling\"}]}], \"providerMetadata\": {\"orgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"shortName\": \"GitHub_M\", \"dateUpdated\": \"2026-06-16T21:26:22.537Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-48779\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-08-03T12:05:49.378Z\", \"dateReserved\": \"2026-05-22T20:18:20.365Z\", \"assignerOrgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"datePublished\": \"2026-06-16T21:26:22.537Z\", \"assignerShortName\": \"GitHub_M\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
RHSA-2026:27171
Vulnerability from csaf_redhat - Published: 2026-06-19 02:03 - Updated: 2026-08-10 06:43Summary
Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Severity
Important
Notes
Topic: An update for Red Hat Hardened Images RPMs is now available.
Details: This update includes the following RPMs:
dotnet9.0:
* aspnetcore-runtime-9.0-9.0.17-1.hum1 (aarch64, x86_64)
* aspnetcore-runtime-dbg-9.0-9.0.17-1.hum1 (aarch64, x86_64)
* aspnetcore-targeting-pack-9.0-9.0.17-1.hum1 (aarch64, x86_64)
* dotnet-apphost-pack-9.0-9.0.17-1.hum1 (aarch64, x86_64)
* dotnet-hostfxr-9.0-9.0.17-1.hum1 (aarch64, x86_64)
* dotnet-runtime-9.0-9.0.17-1.hum1 (aarch64, x86_64)
* dotnet-runtime-dbg-9.0-9.0.17-1.hum1 (aarch64, x86_64)
* dotnet-sdk-9.0-9.0.118-1.hum1 (aarch64, x86_64)
* dotnet-sdk-9.0-source-built-artifacts-9.0.118-1.hum1 (aarch64, x86_64)
* dotnet-sdk-aot-9.0-9.0.118-1.hum1 (aarch64, x86_64)
* dotnet-sdk-dbg-9.0-9.0.118-1.hum1 (aarch64, x86_64)
* dotnet-targeting-pack-9.0-9.0.17-1.hum1 (aarch64, x86_64)
* dotnet-templates-9.0-9.0.118-1.hum1 (aarch64, x86_64)
* netstandard-targeting-pack-2.1-9.0.118-1.hum1 (aarch64, x86_64)
* dotnet9.0-9.0.118-1.hum1.src (src)
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in ws, an open source WebSocket client and server for Node.js. The `websocket.close()` implementation is vulnerable to uninitialized memory disclosure when a `TypedArray` is passed as the reason argument. This can lead to the disclosure of sensitive information from uninitialized memory.
7.5 (High)
Affected products
Fixed
3 products
Threats
Impact
Important
A flaw was found in .NET where uncontrolled resource allocation can be exploited by an unauthorized attacker over a network. This vulnerability allows the attacker to exhaust available resources, leading to a Denial of Service (DoS) condition. The lack of limits or throttling mechanisms enables an attacker to disrupt the availability of the affected system.
7.5 (High)
Affected products
Fixed
3 products
Threats
Impact
Important
A flaw was found in .NET Framework. This improper validation of input allows an unauthorized attacker to remotely deny service over a network. This vulnerability can lead to a Denial of Service (DoS) condition, making the affected system unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
3 products
Threats
Impact
Important
A flaw was found in .NET where uncontrolled allocation of resources can lead to a Denial of Service (DoS). An unauthorized remote attacker could exploit this vulnerability by continuously requesting resources without limits or throttling, causing the affected system to become unresponsive or crash. This can disrupt the availability of services running on the .NET framework.
7.5 (High)
Affected products
Fixed
3 products
Threats
Impact
Important
A flaw was found in .NET. This vulnerability, stemming from improper link resolution before file access, allows an authorized local attacker to perform tampering. This could lead to unauthorized modification of data or system files.
7.0 (High)
Affected products
Fixed
3 products
Threats
Impact
Moderate
A flaw was found in .NET Framework. This vulnerability, a stack-based buffer overflow, allows an unauthorized attacker to remotely exploit the system over a network. Successful exploitation can lead to a denial of service (DoS), making the affected system unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
3 products
Threats
Impact
Important
A flaw was found in .NET where incorrect authorization allows an unauthorized attacker to bypass a security feature over a network. This vulnerability enables an attacker to circumvent intended security controls, potentially leading to unauthorized access or actions within the affected system.
8.2 (High)
Affected products
Fixed
3 products
Threats
Impact
Important
A flaw was found in .NET Framework. This protection mechanism failure allows an unauthorized attacker to execute arbitrary code locally. Successful exploitation of this vulnerability can lead to a complete compromise of the affected system.
7.8 (High)
Affected products
Fixed
3 products
Threats
Impact
Important
A flaw was found in .NET Framework. An unauthorized attacker can exploit this vulnerability remotely by causing the system to allocate resources without proper limits or throttling. This uncontrolled resource allocation can lead to a Denial of Service (DoS), making the affected system unresponsive or unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
3 products
Threats
Impact
Important
A flaw was found in .NET. This vulnerability allows an unauthorized attacker to execute code locally by exploiting a deserialization of untrusted data. This means that if an attacker can provide specially crafted data, the .NET application may process it in a way that leads to the execution of malicious code on the system where the application is running.
7.8 (High)
Affected products
Fixed
3 products
Threats
Impact
Important
A flaw was found in .NET Framework. This vulnerability, caused by improper control of code generation, allows an unauthorized attacker to inject malicious code. Successful exploitation can lead to local privilege escalation, enabling the attacker to gain higher access rights on the affected system.
7.8 (High)
Affected products
Fixed
3 products
Threats
Impact
Important
.NET Denial of Service Vulnerability - HTTP/2 SETTINGS/PING ACK flood causing OOM
7.5 (High)
Affected products
Fixed
3 products
Threats
Impact
Important
A flaw was found in .NET Core. This vulnerability, known as type confusion, allows an unauthorized remote attacker to cause a denial of service (DoS) over a network. By exploiting this flaw, an attacker can make the affected system unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
3 products
Threats
Impact
Important
References
82 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for Red Hat Hardened Images RPMs is now available.",
"title": "Topic"
},
{
"category": "general",
"text": "This update includes the following RPMs:\n\ndotnet9.0:\n * aspnetcore-runtime-9.0-9.0.17-1.hum1 (aarch64, x86_64)\n * aspnetcore-runtime-dbg-9.0-9.0.17-1.hum1 (aarch64, x86_64)\n * aspnetcore-targeting-pack-9.0-9.0.17-1.hum1 (aarch64, x86_64)\n * dotnet-apphost-pack-9.0-9.0.17-1.hum1 (aarch64, x86_64)\n * dotnet-hostfxr-9.0-9.0.17-1.hum1 (aarch64, x86_64)\n * dotnet-runtime-9.0-9.0.17-1.hum1 (aarch64, x86_64)\n * dotnet-runtime-dbg-9.0-9.0.17-1.hum1 (aarch64, x86_64)\n * dotnet-sdk-9.0-9.0.118-1.hum1 (aarch64, x86_64)\n * dotnet-sdk-9.0-source-built-artifacts-9.0.118-1.hum1 (aarch64, x86_64)\n * dotnet-sdk-aot-9.0-9.0.118-1.hum1 (aarch64, x86_64)\n * dotnet-sdk-dbg-9.0-9.0.118-1.hum1 (aarch64, x86_64)\n * dotnet-targeting-pack-9.0-9.0.17-1.hum1 (aarch64, x86_64)\n * dotnet-templates-9.0-9.0.118-1.hum1 (aarch64, x86_64)\n * netstandard-targeting-pack-2.1-9.0.118-1.hum1 (aarch64, x86_64)\n * dotnet9.0-9.0.118-1.hum1.src (src)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:27171",
"url": "https://access.redhat.com/errata/RHSA-2026:27171"
},
{
"category": "external",
"summary": "https://images.redhat.com/",
"url": "https://images.redhat.com/"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-45736",
"url": "https://access.redhat.com/security/cve/CVE-2026-45736"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-50646",
"url": "https://access.redhat.com/security/cve/CVE-2026-50646"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-50527",
"url": "https://access.redhat.com/security/cve/CVE-2026-50527"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-50526",
"url": "https://access.redhat.com/security/cve/CVE-2026-50526"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-50649",
"url": "https://access.redhat.com/security/cve/CVE-2026-50649"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-50524",
"url": "https://access.redhat.com/security/cve/CVE-2026-50524"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-50648",
"url": "https://access.redhat.com/security/cve/CVE-2026-50648"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-50525",
"url": "https://access.redhat.com/security/cve/CVE-2026-50525"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-50528",
"url": "https://access.redhat.com/security/cve/CVE-2026-50528"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-50650",
"url": "https://access.redhat.com/security/cve/CVE-2026-50650"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-47302",
"url": "https://access.redhat.com/security/cve/CVE-2026-47302"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-57108",
"url": "https://access.redhat.com/security/cve/CVE-2026-57108"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-50651",
"url": "https://access.redhat.com/security/cve/CVE-2026-50651"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_27171.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update",
"tracking": {
"current_release_date": "2026-08-10T06:43:15+00:00",
"generator": {
"date": "2026-08-10T06:43:15+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.12"
}
},
"id": "RHSA-2026:27171",
"initial_release_date": "2026-06-19T02:03:31+00:00",
"revision_history": [
{
"date": "2026-06-19T02:03:31+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-08T04:36:23+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-10T06:43:15+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Hardened Images",
"product": {
"name": "Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:hummingbird:1"
}
}
}
],
"category": "product_family",
"name": "Red Hat Hardened Images"
},
{
"branches": [
{
"category": "product_version",
"name": "dotnet9-0-main@aarch64",
"product": {
"name": "dotnet9-0-main@aarch64",
"product_id": "dotnet9-0-main@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-9.0@9.0.17-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "dotnet9-0-main@x86_64",
"product": {
"name": "dotnet9-0-main@x86_64",
"product_id": "dotnet9-0-main@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aspnetcore-runtime-9.0@9.0.17-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "dotnet9-0-main@src",
"product": {
"name": "dotnet9-0-main@src",
"product_id": "dotnet9-0-main@src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/dotnet9.0@9.0.118-1.hum1?arch=src\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-source-rpms"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet9-0-main@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:dotnet9-0-main@aarch64"
},
"product_reference": "dotnet9-0-main@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet9-0-main@src as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:dotnet9-0-main@src"
},
"product_reference": "dotnet9-0-main@src",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dotnet9-0-main@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:dotnet9-0-main@x86_64"
},
"product_reference": "dotnet9-0-main@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-45736",
"cwe": {
"id": "CWE-824",
"name": "Access of Uninitialized Pointer"
},
"discovery_date": "2026-05-15T16:00:55.786944+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477914"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ws, an open source WebSocket client and server for Node.js. The `websocket.close()` implementation is vulnerable to uninitialized memory disclosure when a `TypedArray` is passed as the reason argument. This can lead to the disclosure of sensitive information from uninitialized memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray`",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in the `ws` WebSocket library for Node.js could lead to sensitive information disclosure. The flaw occurs when a `TypedArray` is specifically provided as the `reason` argument to the `websocket.close()` function, potentially exposing uninitialized memory. Red Hat products utilizing this library may be affected if their implementations allow for such a crafted `close()` call.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45736"
},
{
"category": "external",
"summary": "RHBZ#2477914",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477914"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45736",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45736"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45736",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45736"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/c0327ec15a54d701eb6ccefaa8bef328cfc03086",
"url": "https://github.com/websockets/ws/commit/c0327ec15a54d701eb6ccefaa8bef328cfc03086"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/security/advisories/GHSA-58qx-3vcg-4xpx",
"url": "https://github.com/websockets/ws/security/advisories/GHSA-58qx-3vcg-4xpx"
}
],
"release_date": "2026-05-15T14:53:57.263000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-19T02:03:31+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27171"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray`"
},
{
"cve": "CVE-2026-47302",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-07-14T19:05:21.556064+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500515"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in .NET where uncontrolled resource allocation can be exploited by an unauthorized attacker over a network. This vulnerability allows the attacker to exhaust available resources, leading to a Denial of Service (DoS) condition. The lack of limits or throttling mechanisms enables an attacker to disrupt the availability of the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: .NET: Denial of Service vulnerability due to uncontrolled resource allocation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-47302"
},
{
"category": "external",
"summary": "RHBZ#2500515",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500515"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-47302",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47302"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47302",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47302"
},
{
"category": "external",
"summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47302",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47302"
}
],
"release_date": "2026-07-14T18:45:32.796000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-19T02:03:31+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27171"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: .NET: Denial of Service vulnerability due to uncontrolled resource allocation"
},
{
"cve": "CVE-2026-50524",
"cwe": {
"id": "CWE-1287",
"name": "Improper Validation of Specified Type of Input"
},
"discovery_date": "2026-07-14T20:05:17.686937+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500593"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in .NET Framework. This improper validation of input allows an unauthorized attacker to remotely deny service over a network. This vulnerability can lead to a Denial of Service (DoS) condition, making the affected system unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: .NET Framework: Denial of Service via improper input validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-50524"
},
{
"category": "external",
"summary": "RHBZ#2500593",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500593"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-50524",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50524"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50524",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50524"
},
{
"category": "external",
"summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50524",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50524"
}
],
"release_date": "2026-07-14T19:29:53.872000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-19T02:03:31+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27171"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: .NET Framework: Denial of Service via improper input validation"
},
{
"cve": "CVE-2026-50525",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-07-14T20:04:03.113976+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500580"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in .NET where uncontrolled allocation of resources can lead to a Denial of Service (DoS). An unauthorized remote attacker could exploit this vulnerability by continuously requesting resources without limits or throttling, causing the affected system to become unresponsive or crash. This can disrupt the availability of services running on the .NET framework.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: .NET: Denial of Service due to uncontrolled resource allocation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-50525"
},
{
"category": "external",
"summary": "RHBZ#2500580",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500580"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-50525",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50525"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50525",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50525"
},
{
"category": "external",
"summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50525",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50525"
}
],
"release_date": "2026-07-14T19:29:54.357000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-19T02:03:31+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27171"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: .NET: Denial of Service due to uncontrolled resource allocation"
},
{
"cve": "CVE-2026-50526",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2026-07-14T20:02:30.433807+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500565"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in .NET. This vulnerability, stemming from improper link resolution before file access, allows an authorized local attacker to perform tampering. This could lead to unauthorized modification of data or system files.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: .NET: Local tampering via improper link resolution",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-50526"
},
{
"category": "external",
"summary": "RHBZ#2500565",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500565"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-50526",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50526"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50526",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50526"
},
{
"category": "external",
"summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50526",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50526"
}
],
"release_date": "2026-07-14T19:29:54.992000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-19T02:03:31+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27171"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "dotnet: .NET: Local tampering via improper link resolution"
},
{
"cve": "CVE-2026-50527",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2026-07-14T20:04:09.962274+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500581"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in .NET Framework. This vulnerability, a stack-based buffer overflow, allows an unauthorized attacker to remotely exploit the system over a network. Successful exploitation can lead to a denial of service (DoS), making the affected system unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: .NET Framework: Denial of Service via network-based buffer overflow",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-50527"
},
{
"category": "external",
"summary": "RHBZ#2500581",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500581"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-50527",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50527"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50527",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50527"
},
{
"category": "external",
"summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50527",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50527"
}
],
"release_date": "2026-07-14T19:29:55.564000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-19T02:03:31+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27171"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: .NET Framework: Denial of Service via network-based buffer overflow"
},
{
"cve": "CVE-2026-50528",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-07-14T20:02:07.038095+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500562"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in .NET where incorrect authorization allows an unauthorized attacker to bypass a security feature over a network. This vulnerability enables an attacker to circumvent intended security controls, potentially leading to unauthorized access or actions within the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: .NET: Security feature bypass due to incorrect authorization",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-50528"
},
{
"category": "external",
"summary": "RHBZ#2500562",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500562"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-50528",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50528"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50528",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50528"
},
{
"category": "external",
"summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50528",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50528"
}
],
"release_date": "2026-07-14T19:29:56.224000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-19T02:03:31+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27171"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: .NET: Security feature bypass due to incorrect authorization"
},
{
"cve": "CVE-2026-50646",
"cwe": {
"id": "CWE-807",
"name": "Reliance on Untrusted Inputs in a Security Decision"
},
"discovery_date": "2026-07-14T20:03:48.442720+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500577"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in .NET Framework. This protection mechanism failure allows an unauthorized attacker to execute arbitrary code locally. Successful exploitation of this vulnerability can lead to a complete compromise of the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: .NET Framework: Local Code Execution via Protection Mechanism Failure",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-50646"
},
{
"category": "external",
"summary": "RHBZ#2500577",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500577"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-50646",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50646"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50646",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50646"
},
{
"category": "external",
"summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50646",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50646"
}
],
"release_date": "2026-07-14T19:29:56.821000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-19T02:03:31+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27171"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: .NET Framework: Local Code Execution via Protection Mechanism Failure"
},
{
"cve": "CVE-2026-50648",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-07-14T20:04:45.063188+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500587"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in .NET Framework. An unauthorized attacker can exploit this vulnerability remotely by causing the system to allocate resources without proper limits or throttling. This uncontrolled resource allocation can lead to a Denial of Service (DoS), making the affected system unresponsive or unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: .NET Framework: Remote Denial of Service due to uncontrolled resource allocation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-50648"
},
{
"category": "external",
"summary": "RHBZ#2500587",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500587"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-50648",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50648"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50648",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50648"
},
{
"category": "external",
"summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50648",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50648"
}
],
"release_date": "2026-07-14T19:29:57.312000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-19T02:03:31+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27171"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: .NET Framework: Remote Denial of Service due to uncontrolled resource allocation"
},
{
"cve": "CVE-2026-50649",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2026-07-14T20:02:12.073604+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500563"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in .NET. This vulnerability allows an unauthorized attacker to execute code locally by exploiting a deserialization of untrusted data. This means that if an attacker can provide specially crafted data, the .NET application may process it in a way that leads to the execution of malicious code on the system where the application is running.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: .NET: Local code execution via deserialization of untrusted data",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-50649"
},
{
"category": "external",
"summary": "RHBZ#2500563",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500563"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-50649",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50649"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50649",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50649"
},
{
"category": "external",
"summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50649",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50649"
}
],
"release_date": "2026-07-14T19:29:57.970000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-19T02:03:31+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27171"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: .NET: Local code execution via deserialization of untrusted data"
},
{
"cve": "CVE-2026-50650",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-07-14T20:01:20.750427+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500556"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in .NET Framework. This vulnerability, caused by improper control of code generation, allows an unauthorized attacker to inject malicious code. Successful exploitation can lead to local privilege escalation, enabling the attacker to gain higher access rights on the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: .NET Framework: Privilege escalation via code injection",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-50650"
},
{
"category": "external",
"summary": "RHBZ#2500556",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500556"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-50650",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50650"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50650",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50650"
},
{
"category": "external",
"summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50650",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50650"
}
],
"release_date": "2026-07-14T19:29:58.620000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-19T02:03:31+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27171"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: .NET Framework: Privilege escalation via code injection"
},
{
"cve": "CVE-2026-50651",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-07-10T20:34:51.149000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2499217"
}
],
"notes": [
{
"category": "description",
"text": ".NET Denial of Service Vulnerability - HTTP/2 SETTINGS/PING ACK flood causing OOM",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: SocketsHttpHandler Http2Connection - HTTP/2 SETTINGS/PING ACK flood causing OOM",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-50651"
},
{
"category": "external",
"summary": "RHBZ#2499217",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2499217"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-50651",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50651"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50651",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50651"
}
],
"release_date": "2026-07-14T21:37:42.263000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-19T02:03:31+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27171"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: SocketsHttpHandler Http2Connection - HTTP/2 SETTINGS/PING ACK flood causing OOM"
},
{
"cve": "CVE-2026-57108",
"cwe": {
"id": "CWE-843",
"name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
},
"discovery_date": "2026-07-14T18:02:49.265651+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500109"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in .NET Core. This vulnerability, known as type confusion, allows an unauthorized remote attacker to cause a denial of service (DoS) over a network. By exploiting this flaw, an attacker can make the affected system unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "dotnet: .NET Core: Denial of Service via type confusion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-57108"
},
{
"category": "external",
"summary": "RHBZ#2500109",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500109"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-57108",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-57108"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-57108",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-57108"
},
{
"category": "external",
"summary": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57108",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57108"
}
],
"release_date": "2026-07-14T17:09:39.087000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-19T02:03:31+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:27171"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:dotnet9-0-main@aarch64",
"Red Hat Hardened Images:dotnet9-0-main@src",
"Red Hat Hardened Images:dotnet9-0-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "dotnet: .NET Core: Denial of Service via type confusion"
}
]
}
RHSA-2026:29197
Vulnerability from csaf_redhat - Published: 2026-06-24 16:29 - Updated: 2026-08-10 06:43Summary
Red Hat Security Advisory: A Subscription Management tool for finding and reporting Red Hat product usage
Severity
Important
Notes
Topic: A Subscription Management tool for finding and reporting Red Hat product usage
Details: Red Hat Discovery, also known as Discovery, is an inspection and reporting tool that finds,
identifies, and reports environment data, or facts, such as the number of physical and virtual
systems on a network, their operating systems, and relevant configuration data stored within
them. Discovery also identifies and reports more detailed facts for some versions of key
Red Hat packages and products that it finds in the network.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in rsync. It could allow a server to enumerate the contents of an arbitrary file from the client's machine. This issue occurs when files are being copied from a client to a server. During this process, the rsync server will send checksums of local data to the client to compare with in order to determine what data needs to be sent to the server. By sending specially constructed checksum values for arbitrary files, an attacker may be able to reconstruct the data of those files byte-by-byte based on the responses from the client.
6.1 (Medium)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in GLib (Gnome Lib). This vulnerability allows a remote attacker to cause heap corruption, leading to a denial of service or potential code execution via a buffer-underflow in the GVariant parser when processing maliciously crafted input strings.
5.6 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in glib. This vulnerability allows a heap buffer overflow and denial-of-service (DoS) via an integer overflow in GLib's GIO (GLib Input/Output) escape_byte_string() function when processing malicious file or remote filesystem attribute values.
6.5 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted Online Certificate Status Protocol (OCSP) response during a TLS handshake. Due to a logic error in how gnutls processes multi-record OCSP responses, a client with OCSP verification enabled may incorrectly accept a revoked server certificate, potentially leading to a compromise of trust.
CWE-179 - Incorrect Behavior Order: Early ValidationAffected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Low
A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of `nameConstraints` labels, specifically for `dNSName` (DNS) or `rfc822Name` (email) constraints within `excludedSubtrees` or `permittedSubtrees`. A remote attacker can exploit this by crafting a leaf certificate with casing differences in the Subject Alternative Name (SAN), leading to a policy bypass where a certificate that should be rejected is instead accepted. This could result in unauthorized access or information disclosure.
6.5 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in glibc, the GNU C Library. A remote attacker could exploit this vulnerability by providing specially crafted inputs using the IBM1390 or IBM1399 character sets to the `iconv()` function. This could lead to an assertion failure, causing the application to crash and resulting in a Denial of Service (DoS).
5.3 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in glibc (the GNU C Library). When an application uses the `gethostbyaddr` or `gethostbyaddr_r` functions with a `nsswitch.conf` configuration that specifies glibc's DNS backend, a remote attacker can send a specially crafted DNS (Domain Name System) response. This crafted response can cause the application to incorrectly interpret a non-answer section of the DNS response as a valid answer, leading to potential misbehavior or incorrect information processing.
6.5 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the GNU C library (glibc). When applications use the `gethostbyaddr` or `gethostbyaddr_r` functions with a `nsswitch.conf` configuration that specifies glibc's DNS backend, the library may return an invalid DNS hostname. This violates the DNS specification and could lead to applications receiving incorrect hostname information, potentially impacting network operations or security decisions.
4.0 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Low
A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the `cap_set_file()` function. This allows an attacker with write access to a parent directory to redirect file capability updates to an attacker-controlled file. By doing so, capabilities can be injected into or stripped from unintended executables, leading to privilege escalation.
6.7 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an RSA key exchange to a server using an RSA key backed by a PKCS#11 token, could trigger a short heap overread. This memory corruption vulnerability could lead to information disclosure.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in gnutls. The PKCS#7 padding check, performed during decryption, was not constant-time. This timing side-channel could allow a remote attacker to potentially leak sensitive information about the padding bytes through observable timing differences. This vulnerability is a form of information disclosure.
CWE-208 - Observable Timing DiscrepancyAffected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64 | — |
Vendor Fix
fix
|
Threats
Impact
Low
A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI's intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64 | — |
Vendor Fix
fix
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64 | — | ||
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64 | — |
Threats
Impact
Important
A flaw was found in OpenSSL. A signed integer overflow vulnerability exists when sizing the destination buffer for Unicode output. This can lead to a heap buffer overflow, which may result in a crash or potentially allow an attacker to execute arbitrary code. Exploitation requires an application to directly call specific functions with a large amount of attacker-controlled input.
5.5 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Low
A flaw was found in OpenSSL. When processing attacker-supplied Cryptographic Message Syntax (CMS) data using password-based decryption, an attacker can choose a stream-mode Key Encryption Key (KEK) cipher. This can trigger a heap out-of-bounds read, potentially causing an application crash and leading to a Denial of Service (DoS). This vulnerability does not require password knowledge and can be exploited before authentication.
5.9 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Low
A flaw was found in the shell-quote component. The quote() function did not properly validate object-token inputs, allowing line terminators to pass unescaped into the output. A remote attacker could exploit this vulnerability by providing specially crafted input, which a POSIX shell would interpret as a command separator. This could lead to command injection, enabling the attacker to execute arbitrary code on the system.
8.1 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64 | — |
Vendor Fix
fix
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64 | — | ||
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64 | — |
Threats
Impact
Important
A flaw was found in OpenSSL. A remote attacker could exploit this vulnerability by sending a specially crafted Cryptographic Message Syntax (CMS) EnvelopedData message. During the processing of a KeyTransportRecipientInfo with RSA-OAEP encryption, the system attempts to access an optional parameter field without first verifying its presence. This leads to a NULL pointer dereference, which can cause applications processing the attacker-controlled CMS data to crash, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in rsync. An rsync daemon configured with "use chroot = no" is exposed to a time-of-check / time-of-use race on parent path components. A local attacker with write access to a module can replace a parent directory component with a symlink between the receiver's check and its open(), redirecting reads (basis-file disclosure) and writes (file overwrite) outside the module. Under elevated daemon privilege this allows privilege escalation. Default "use chroot = yes" is not exposed. Reach: local attacker on the daemon host, write access to a module path, daemon configured with use chroot = no.
7.8 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is remotely exploitable and may cause information disclosure or denial of service.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A heap buffer overflow vulnerability exists in the DTLS handshake fragment reassembly logic of GnuTLS. The issue arises in merge_handshake_packet() where incoming handshake fragments are matched and merged based solely on handshake type, without validating that the message_length field remains consistent across all fragments of the same logical message. An attacker can exploit this by sending crafted DTLS fragments with conflicting message_length values, causing the implementation to allocate a buffer based on a smaller initial fragment and subsequently write beyond its bounds using larger, inconsistent fragments. Because the merge operation does not enforce proper bounds checking against the allocated buffer size, this results in an out-of-bounds write on the heap. The vulnerability is remotely exploitable without authentication via the DTLS handshake path and can lead to application crashes or potential memory corruption.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in OpenSSL. An integer truncation vulnerability in the ASN.1 decoder can occur when processing a crafted DER-encoded ASN.1 structure with a primitive element exceeding 2 gigabytes. A remote attacker could exploit this to cause a heap buffer over-read. This may lead to an application crash, resulting in a Denial of Service (DoS), or potentially disclose sensitive information by loading memory contents beyond the input buffer. This issue primarily affects 64-bit Unix and Unix-like platforms.
5.0 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Low
A flaw was found in OpenSSL. This vulnerability allows a remote attacker to forge PKCS#12 (Public-Key Cryptography Standards #12) files that use Password-Based Message Authentication Code 1 (PBMAC1) with short HMAC (Hash-based Message Authentication Code) keys. This can lead to a service accepting attacker-controlled certificates and private keys with a 1 in 256 probability, potentially enabling impersonation.
6.3 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Low
A flaw was found in OpenSSL's Cryptographic Message Services (CMS) AuthEnvelopedData processing. An on-path attacker can exploit insufficient input validation on cipher and tag length fields by sending specially crafted CMS messages. This can lead to the forging of messages or bypassing integrity validation. Consequently, an attacker may achieve key-equivalent functionality for a given CMS recipient.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in OpenSSL's QUIC PATH_CHALLENGE handler. A remote attacker can exploit this vulnerability by flooding a QUIC client or server with specially crafted PATH_CHALLENGE frames. This leads to unbounded memory allocation within the local QUIC stack, as the system continuously allocates PATH_RESPONSE frames without them being acknowledged. The primary consequence is a Denial of Service (DoS), causing the affected application to terminate abnormally due to memory exhaustion.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in MIT Kerberos 5 (krb5). An unauthenticated remote attacker can exploit a NULL pointer dereference vulnerability by calling `gss_accept_sec_context()` on a system with a NegoEx mechanism registered. This can lead to the termination of the process, resulting in a Denial of Service (DoS).
5.9 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in MIT Kerberos 5 (krb5). An unauthenticated remote attacker can exploit an integer underflow and an out-of-bounds read vulnerability by calling `gss_accept_sec_context()` on a system with a NegoEx mechanism registered. This can lead to the process terminating, resulting in a Denial of Service (DoS).
5.9 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in rsync. When rsync is configured to handle extended attributes (using the -X or --xattrs option), a remote attacker can exploit a use-after-free vulnerability. This occurs because the receive_xattr function incorrectly processes an untrusted length value during a sorting operation, leading to memory corruption. Successful exploitation can result in a denial of service, causing the rsync process to crash, and may potentially allow for arbitrary code execution.
7.4 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security (DTLS) packet reordering logic. The comparator function, responsible for ordering DTLS packets by sequence numbers, did not correctly handle packets with duplicate sequence numbers. This could lead to unstable packet ordering or undefined behavior, resulting in a denial of service.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest–Shamir–Adleman – Pre-Shared Key) wrongfully matched usernames containing a NUL character with truncated usernames. A remote attacker could exploit this by sending a specially crafted username, leading to an authentication bypass. This vulnerability allows an attacker to gain unauthorized access by circumventing the authentication process.
7.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in gnutls. This vulnerability occurs because permitted name constraints were incorrectly ignored when previous Certificate Authorities (CAs) only had excluded name constraints. A remote attacker could exploit this to bypass critical name constraint checks during certificate validation. This bypass could lead to the acceptance of invalid certificates, potentially enabling spoofing or man-in-the-middle attacks against affected systems.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted certificate that contains Uniform Resource Identifier (URI) or Service (SRV) Subject Alternative Names (SANs). This could cause the certificate validation process to incorrectly fall back to checking DNS hostnames against the Common Name (CN), potentially allowing the attacker to spoof legitimate services or intercept sensitive information.
7.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in gnutls. When validating certificates, an oversized Subject Alternative Name (SAN) could cause the validation process to incorrectly fall back to checking the Common Name (CN) field. This could allow a remote attacker to bypass proper certificate validation, potentially leading to spoofing or man-in-the-middle attacks.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in GnuTLS. The `gnutls_pkcs11_token_set_pin` function, used for changing the Security Officer PIN, can lead to a use-after-free vulnerability. This occurs when an attacker attempts to change the PIN with a NULL old PIN for a token that lacks a protected authentication path.
6.6 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in gnutls. An off-by-one error exists in the PKCS#12 bag element bounds check. This vulnerability allows an remote attacker to write past the internal array of a PKCS#12 bag when appending to a bag that already contains 32 elements. This memory corruption could lead to a denial of service (DoS) or potentially other unspecified impacts.
5.3 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in the OpenSSL QUIC (Quick UDP Internet Connections) server. A remote attacker could send a specially crafted QUIC initial packet with an invalid token. If the server's address validation is explicitly disabled, this could lead to a NULL pointer dereference, causing the server process to terminate abnormally and resulting in a Denial of Service (DoS).
5.9 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in OpenSSL. A remote attacker could exploit a NULL pointer dereference vulnerability in the Cryptographic Message Syntax (CMS) decryption process by providing a specially crafted password-encrypted CMS message. This occurs because the keyDerivationAlgorithm field, which is optional, is dereferenced without proper validation. Successful exploitation leads to an application crash, resulting in a Denial of Service.
5.3 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Low
A flaw was found in OpenSSL. An attacker controlling a Certificate Management Protocol (CMP) server, or acting as a man-in-the-middle, could craft a malicious CMP response. This response, containing a Certificate Request Message Format (CRMF) CertRepMessage with a specific malformed EncryptedValue structure, would trigger a NULL pointer dereference in the OpenSSL CMP client. This vulnerability leads to a crash of the application, resulting in a Denial of Service (DoS).
5.3 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Low
A flaw was found in OpenSSL's CMS_decrypt() and PKCS7_decrypt() functions. This vulnerability, a Bleichenbacher-style oracle, could allow a remote attacker to decrypt or sign messages using the victim's private RSA key. Exploitation requires the attacker to provide specially crafted CMS or S/MIME messages and observe the application's error codes or decryption output. While the attack is technically possible, the specific conditions required make it unlikely to be exploited in typical deployments.
6.3 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Low
A flaw was found in the Certificate Management Protocol (CMP) implementation within OpenSSL. An attacker with existing Registration Authority (RA) level credentials could exploit an error in the certificate verification process during a Root Certificate Authority (CA) key update. This vulnerability allows the attacker to replace the root CA certificate for CMP clients with a fraudulent one. The primary consequence is an escalation of privileges, enabling the attacker to gain control equivalent to the root CA.
5.9 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Low
A flaw was found in OpenSSL. A malicious peer can exploit this vulnerability by presenting a specially crafted DHX (X9.42) peer key. Due to improper validation of the peer key's subgroup membership, an attacker can recover the victim's private key after a small number of key exchange attempts. This information disclosure can lead to unauthorized access or further compromise of affected systems.
5.9 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Low
A flaw was found in rsync. An authenticated daemon peer can exploit an integer overflow vulnerability in the compressed-token decoder. By carefully manipulating the compressed-token, a malicious sender can trigger an overflow, leading to remote memory disclosure. This allows an attacker to leak sensitive process memory contents, including environment variables, passwords, and memory pointers, which significantly weakens Address Space Layout Randomization (ASLR) and can facilitate further exploitation.
8.1 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.
8.6 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. This vulnerability, a Prototype Pollution "Gadget" attack, allows an attacker to escalate any existing Object.prototype pollution in an application's dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.
8.7 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.
7.0 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in libexpat. When processing a specially crafted XML input containing a specific pattern of attributes, the parsing time increases quadratically due to checks for attribute name collisions. This consumes excessive CPU resources and eventually results in a denial of service.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in OpenSSL. Applications that use the AES-OCB encryption method with a specific one-shot interface (EVP_Cipher()) will have their provided Initialization Vector (IV) silently discarded. This leads to the same internal cryptographic value being used repeatedly, which compromises the confidentiality of encrypted data. Additionally, this issue allows for the universal forgery of authentication tags, undermining the integrity of communications.
9.1 (Critical)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in OpenSSL. The implementations of AES-SIV (Advanced Encryption Standard - SIV) and AES-GCM-SIV (Advanced Encryption Standard - Galois/Counter Mode - SIV) incorrectly process authentication tags for empty messages. This vulnerability allows a remote attacker to forge empty messages with arbitrary Additional Authenticated Data (AAD) in applications that utilize these specific cipher modes within custom protocols and do not properly handle zero-length ciphertexts. This could lead to unauthorized data manipulation.
CWE-347 - Improper Verification of Cryptographic SignatureAffected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Low
A flaw was found in OpenSSL. When processing a specially crafted PKCS#7 or S/MIME (Secure/Multipurpose Internet Mail Extensions) signed message, a heap use-after-free vulnerability in the PKCS7_verify() function can be triggered. This occurs if the SignedData digestAlgorithms field is present as an empty ASN.1 SET, leading to incorrect memory deallocation. A remote attacker could exploit this to cause application crashes, memory corruption, or potentially achieve remote code execution.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in ws, an open source WebSocket client and server for Node.js. The `websocket.close()` implementation is vulnerable to uninitialized memory disclosure when a `TypedArray` is passed as the reason argument. This can lead to the disclosure of sensitive information from uninitialized memory.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64 | — |
Vendor Fix
fix
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64 | — | ||
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64 | — |
Threats
Impact
Important
A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that consume excessive memory. Consequently, this leads to process termination and a denial of service (DoS) for the remote peer.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64 | — |
Workaround
|
Threats
Impact
Important
References
323 references
Acknowledgments
Google
Jasiel Spelman
Simon Scannell
Pedro Gallegos
Sovereign Tech Agency
Sovereign Tech Resilience program
treeplus
Codean Labs
Ali Raza
AISLE Research Team
Joshua Rogers
Stony Brook University
Doria Tang
Stella
Haruto Kimura
1Seal
Oleh Konko
Luigino Camastra
Zou Dikai
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "A Subscription Management tool for finding and reporting Red Hat product usage",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Discovery, also known as Discovery, is an inspection and reporting tool that finds,\nidentifies, and reports environment data, or facts, such as the number of physical and virtual\nsystems on a network, their operating systems, and relevant configuration data stored within\nthem. Discovery also identifies and reports more detailed facts for some versions of key\nRed Hat packages and products that it finds in the network.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:29197",
"url": "https://access.redhat.com/errata/RHSA-2026:29197"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2024-12086",
"url": "https://access.redhat.com/security/cve/CVE-2024-12086"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-14087",
"url": "https://access.redhat.com/security/cve/CVE-2025-14087"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-14512",
"url": "https://access.redhat.com/security/cve/CVE-2025-14512"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-28390",
"url": "https://access.redhat.com/security/cve/CVE-2026-28390"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29518",
"url": "https://access.redhat.com/security/cve/CVE-2026-29518"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33845",
"url": "https://access.redhat.com/security/cve/CVE-2026-33845"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33846",
"url": "https://access.redhat.com/security/cve/CVE-2026-33846"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-34180",
"url": "https://access.redhat.com/security/cve/CVE-2026-34180"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-34181",
"url": "https://access.redhat.com/security/cve/CVE-2026-34181"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-34182",
"url": "https://access.redhat.com/security/cve/CVE-2026-34182"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-34183",
"url": "https://access.redhat.com/security/cve/CVE-2026-34183"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-3832",
"url": "https://access.redhat.com/security/cve/CVE-2026-3832"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-3833",
"url": "https://access.redhat.com/security/cve/CVE-2026-3833"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-40355",
"url": "https://access.redhat.com/security/cve/CVE-2026-40355"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-40356",
"url": "https://access.redhat.com/security/cve/CVE-2026-40356"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4046",
"url": "https://access.redhat.com/security/cve/CVE-2026-4046"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-41035",
"url": "https://access.redhat.com/security/cve/CVE-2026-41035"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42009",
"url": "https://access.redhat.com/security/cve/CVE-2026-42009"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42010",
"url": "https://access.redhat.com/security/cve/CVE-2026-42010"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42011",
"url": "https://access.redhat.com/security/cve/CVE-2026-42011"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42012",
"url": "https://access.redhat.com/security/cve/CVE-2026-42012"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42013",
"url": "https://access.redhat.com/security/cve/CVE-2026-42013"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42014",
"url": "https://access.redhat.com/security/cve/CVE-2026-42014"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42015",
"url": "https://access.redhat.com/security/cve/CVE-2026-42015"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42764",
"url": "https://access.redhat.com/security/cve/CVE-2026-42764"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42766",
"url": "https://access.redhat.com/security/cve/CVE-2026-42766"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42767",
"url": "https://access.redhat.com/security/cve/CVE-2026-42767"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42768",
"url": "https://access.redhat.com/security/cve/CVE-2026-42768"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42769",
"url": "https://access.redhat.com/security/cve/CVE-2026-42769"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42770",
"url": "https://access.redhat.com/security/cve/CVE-2026-42770"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-43618",
"url": "https://access.redhat.com/security/cve/CVE-2026-43618"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4437",
"url": "https://access.redhat.com/security/cve/CVE-2026-4437"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4438",
"url": "https://access.redhat.com/security/cve/CVE-2026-4438"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44486",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44487",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44488",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44492",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44494",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44495",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44496",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-45186",
"url": "https://access.redhat.com/security/cve/CVE-2026-45186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-45445",
"url": "https://access.redhat.com/security/cve/CVE-2026-45445"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-45446",
"url": "https://access.redhat.com/security/cve/CVE-2026-45446"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-45447",
"url": "https://access.redhat.com/security/cve/CVE-2026-45447"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-45736",
"url": "https://access.redhat.com/security/cve/CVE-2026-45736"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-48779",
"url": "https://access.redhat.com/security/cve/CVE-2026-48779"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4878",
"url": "https://access.redhat.com/security/cve/CVE-2026-4878"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-5260",
"url": "https://access.redhat.com/security/cve/CVE-2026-5260"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-5419",
"url": "https://access.redhat.com/security/cve/CVE-2026-5419"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-6322",
"url": "https://access.redhat.com/security/cve/CVE-2026-6322"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-7383",
"url": "https://access.redhat.com/security/cve/CVE-2026-7383"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-9076",
"url": "https://access.redhat.com/security/cve/CVE-2026-9076"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-9277",
"url": "https://access.redhat.com/security/cve/CVE-2026-9277"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/subscription_central/1-latest/#Discovery",
"url": "https://docs.redhat.com/en/documentation/subscription_central/1-latest/#Discovery"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_29197.json"
}
],
"title": "Red Hat Security Advisory: A Subscription Management tool for finding and reporting Red Hat product usage",
"tracking": {
"current_release_date": "2026-08-10T06:43:17+00:00",
"generator": {
"date": "2026-08-10T06:43:17+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.12"
}
},
"id": "RHSA-2026:29197",
"initial_release_date": "2026-06-24T16:29:56+00:00",
"revision_history": [
{
"date": "2026-06-24T16:29:56+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-08T04:36:23+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-10T06:43:17+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Discovery 2",
"product": {
"name": "Red Hat Discovery 2",
"product_id": "Red Hat Discovery 2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:discovery:2::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Discovery"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"product": {
"name": "registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"product_id": "registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"product_identification_helper": {
"purl": "pkg:oci/discovery-server-rhel9@sha256%3A6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc?arch=amd64\u0026repository_url=registry.redhat.io/discovery/discovery-server-rhel9\u0026tag=1782159791"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"product": {
"name": "registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"product_id": "registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/discovery-ui-rhel9@sha256%3A16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b?arch=amd64\u0026repository_url=registry.redhat.io/discovery/discovery-ui-rhel9\u0026tag=1782166952"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"product": {
"name": "registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"product_id": "registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"product_identification_helper": {
"purl": "pkg:oci/discovery-server-rhel9@sha256%3Accd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34?arch=arm64\u0026repository_url=registry.redhat.io/discovery/discovery-server-rhel9\u0026tag=1782159791"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64",
"product": {
"name": "registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64",
"product_id": "registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64",
"product_identification_helper": {
"purl": "pkg:oci/discovery-ui-rhel9@sha256%3A335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75?arch=arm64\u0026repository_url=registry.redhat.io/discovery/discovery-ui-rhel9\u0026tag=1782166952"
}
}
}
],
"category": "architecture",
"name": "arm64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64 as a component of Red Hat Discovery 2",
"product_id": "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64"
},
"product_reference": "registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"relates_to_product_reference": "Red Hat Discovery 2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64 as a component of Red Hat Discovery 2",
"product_id": "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64"
},
"product_reference": "registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"relates_to_product_reference": "Red Hat Discovery 2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64 as a component of Red Hat Discovery 2",
"product_id": "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64"
},
"product_reference": "registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"relates_to_product_reference": "Red Hat Discovery 2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64 as a component of Red Hat Discovery 2",
"product_id": "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
},
"product_reference": "registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64",
"relates_to_product_reference": "Red Hat Discovery 2"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Jasiel Spelman",
"Simon Scannell",
"Pedro Gallegos"
],
"organization": "Google"
}
],
"cve": "CVE-2024-12086",
"cwe": {
"id": "CWE-390",
"name": "Detection of Error Condition Without Action"
},
"discovery_date": "2024-12-05T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2330577"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in rsync. It could allow a server to enumerate the contents of an arbitrary file from the client\u0027s machine. This issue occurs when files are being copied from a client to a server. During this process, the rsync server will send checksums of local data to the client to compare with in order to determine what data needs to be sent to the server. By sending specially constructed checksum values for arbitrary files, an attacker may be able to reconstruct the data of those files byte-by-byte based on the responses from the client.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rsync: rsync server leaks arbitrary client files",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability marked as moderate rather than important because it requires the attacker to control the rsync server, which limits the scope of exploitation to scenarios where the client interacts with untrusted or compromised servers. Additionally, the attack is non-trivial, as it relies on the attacker sending specially crafted checksum values and deducing file contents byte-by-byte based on the client\u2019s responses. This makes the exploit more complex and time-consuming compared to direct file access vulnerabilities. Furthermore, the impact is limited to file data enumeration, and it does not allow arbitrary code execution or privilege escalation on the client.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"known_not_affected": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-12086"
},
{
"category": "external",
"summary": "RHBZ#2330577",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2330577"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-12086",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-12086"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-12086",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12086"
},
{
"category": "external",
"summary": "https://kb.cert.org/vuls/id/952657",
"url": "https://kb.cert.org/vuls/id/952657"
}
],
"release_date": "2025-01-14T15:06:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-24T16:29:56+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29197"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rsync: rsync server leaks arbitrary client files"
},
{
"acknowledgments": [
{
"names": [
"Sovereign Tech Resilience program"
],
"organization": "Sovereign Tech Agency"
},
{
"names": [
"treeplus"
]
}
],
"cve": "CVE-2025-14087",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2025-12-05T08:35:24.744000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2419093"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in GLib (Gnome Lib). This vulnerability allows a remote attacker to cause heap corruption, leading to a denial of service or potential code execution via a buffer-underflow in the GVariant parser when processing maliciously crafted input strings.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "glib: GLib: Buffer underflow in GVariant parser leads to heap corruption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The highest threat is to system availability due to potential application crashes when processing maliciously crafted input strings through GLib\u0027s GVariant parser. This issue affects applications that utilize g_variant_parse() on untrusted data, leading to memory corruption and possible denial of service.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-14087"
},
{
"category": "external",
"summary": "RHBZ#2419093",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2419093"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-14087",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-14087"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-14087",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-14087"
},
{
"category": "external",
"summary": "https://gitlab.gnome.org/GNOME/glib/-/issues/3834",
"url": "https://gitlab.gnome.org/GNOME/glib/-/issues/3834"
}
],
"release_date": "2025-12-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-24T16:29:56+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29197"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "glib: GLib: Buffer underflow in GVariant parser leads to heap corruption"
},
{
"acknowledgments": [
{
"names": [
"Codean Labs"
]
}
],
"cve": "CVE-2025-14512",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2025-12-11T06:22:59.701000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2421339"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in glib. This vulnerability allows a heap buffer overflow and denial-of-service (DoS) via an integer overflow in GLib\u0027s GIO (GLib Input/Output) escape_byte_string() function when processing malicious file or remote filesystem attribute values.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "glib: Integer Overflow in GLib GIO Attribute Escaping Causes Heap Buffer Overflow",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Moderate for Red Hat products because an integer overflow in GLib\u0027s GIO `escape_byte_string()` function can lead to a heap buffer overflow and denial-of-service. This occurs when processing specially crafted file or remote filesystem attribute values, requiring an attacker to provide malicious input.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-14512"
},
{
"category": "external",
"summary": "RHBZ#2421339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2421339"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-14512",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-14512"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-14512",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-14512"
},
{
"category": "external",
"summary": "https://gitlab.gnome.org/GNOME/glib/-/issues/3845",
"url": "https://gitlab.gnome.org/GNOME/glib/-/issues/3845"
}
],
"release_date": "2025-12-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-24T16:29:56+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29197"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "glib: Integer Overflow in GLib GIO Attribute Escaping Causes Heap Buffer Overflow"
},
{
"cve": "CVE-2026-3832",
"cwe": {
"id": "CWE-179",
"name": "Incorrect Behavior Order: Early Validation"
},
"discovery_date": "2026-03-09T13:41:32.810000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445762"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted Online Certificate Status Protocol (OCSP) response during a TLS handshake. Due to a logic error in how gnutls processes multi-record OCSP responses, a client with OCSP verification enabled may incorrectly accept a revoked server certificate, potentially leading to a compromise of trust.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "gnutls: gnutls: Security bypass allows acceptance of revoked server certificates via crafted OCSP response",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue has a LOW impact. A flaw in gnutls\u0027 OCSP stapling implementation allows a client with OCSP verification enabled to accept a revoked server certificate. This occurs when a multi-record OCSP response is stapled, and the client incorrectly reads the certificate status from an unrelated record, leading to an order-dependent acceptance of a revoked certificate.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-3832"
},
{
"category": "external",
"summary": "RHBZ#2445762",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445762"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-3832",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-3832"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-3832",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-3832"
},
{
"category": "external",
"summary": "https://gitlab.com/gnutls/gnutls/-/issues/1801",
"url": "https://gitlab.com/gnutls/gnutls/-/issues/1801"
}
],
"release_date": "2026-04-30T17:29:25.738000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-24T16:29:56+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29197"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "gnutls: gnutls: Security bypass allows acceptance of revoked server certificates via crafted OCSP response"
},
{
"cve": "CVE-2026-3833",
"cwe": {
"id": "CWE-178",
"name": "Improper Handling of Case Sensitivity"
},
"discovery_date": "2026-03-09T14:02:09.783000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445763"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of `nameConstraints` labels, specifically for `dNSName` (DNS) or `rfc822Name` (email) constraints within `excludedSubtrees` or `permittedSubtrees`. A remote attacker can exploit this by crafting a leaf certificate with casing differences in the Subject Alternative Name (SAN), leading to a policy bypass where a certificate that should be rejected is instead accepted. This could result in unauthorized access or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "gnutls: GnuTLS: Policy bypass due to case-sensitive nameConstraints comparison",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue is particularly important because it affects the correct enforcement of X.509 nameConstraints, which are specifically designed to limit the authority of subordinate CAs. In GnuTLS, the use of case-sensitive comparisons (memcmp) for dNSName and the domain portion of rfc822Name violates the case-insensitive matching requirements defined in RFC 5280 and RFC 4343. As a result, a constrained subordinate CA can bypass excludedSubtrees or permittedSubtrees restrictions simply by changing the letter casing of a domain in the SAN (e.g., ExAmPlE.CoM vs example.com). Since nameConstraints are often the only mechanism enforcing domain boundaries in delegated PKI hierarchies, this flaw effectively allows a malicious or compromised sub-CA to issue certificates for domains that should be cryptographically prohibited, enabling unauthorized certificate validation and potential TLS impersonation of restricted services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-3833"
},
{
"category": "external",
"summary": "RHBZ#2445763",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445763"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-3833",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-3833"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-3833",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-3833"
},
{
"category": "external",
"summary": "https://gitlab.com/gnutls/gnutls/-/issues/1803",
"url": "https://gitlab.com/gnutls/gnutls/-/issues/1803"
}
],
"release_date": "2026-04-30T17:26:28.969000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-24T16:29:56+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29197"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "gnutls: GnuTLS: Policy bypass due to case-sensitive nameConstraints comparison"
},
{
"cve": "CVE-2026-4046",
"cwe": {
"id": "CWE-617",
"name": "Reachable Assertion"
},
"discovery_date": "2026-03-30T18:01:19.326391+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2453117"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in glibc, the GNU C Library. A remote attacker could exploit this vulnerability by providing specially crafted inputs using the IBM1390 or IBM1399 character sets to the `iconv()` function. This could lead to an assertion failure, causing the application to crash and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "glibc: glibc: Denial of Service via iconv() function with specific character sets",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The availability impact posed by this flaw is limited on Red Hat systems. The affected iconv() function has been separated out into a an independent package (`glibc-gconv-extra`) and is not used in system critical software. Some applications do rely on this package and may be affected, but they are either interactive applications or are configured to restart in the event of a crash.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4046"
},
{
"category": "external",
"summary": "RHBZ#2453117",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453117"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4046",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4046"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4046",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4046"
},
{
"category": "external",
"summary": "https://packages.fedoraproject.org/pkgs/glibc/glibc-gconv-extra/",
"url": "https://packages.fedoraproject.org/pkgs/glibc/glibc-gconv-extra/"
},
{
"category": "external",
"summary": "https://sourceware.org/bugzilla/show_bug.cgi?id=33980",
"url": "https://sourceware.org/bugzilla/show_bug.cgi?id=33980"
},
{
"category": "external",
"summary": "https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0007;hb=HEAD",
"url": "https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0007;hb=HEAD"
}
],
"release_date": "2026-03-30T17:16:11.021000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-24T16:29:56+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29197"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "glibc: glibc: Denial of Service via iconv() function with specific character sets"
},
{
"cve": "CVE-2026-4437",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-20T21:01:45.993907+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449777"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in glibc (the GNU C Library). When an application uses the `gethostbyaddr` or `gethostbyaddr_r` functions with a `nsswitch.conf` configuration that specifies glibc\u0027s DNS backend, a remote attacker can send a specially crafted DNS (Domain Name System) response. This crafted response can cause the application to incorrectly interpret a non-answer section of the DNS response as a valid answer, leading to potential misbehavior or incorrect information processing.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "glibc: glibc: Incorrect DNS response parsing via crafted DNS server response",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This MODERATE impact flaw in glibc allows a remote attacker to send a specially crafted DNS response when an application uses `gethostbyaddr` or `gethostbyaddr_r` with glibc\u0027s DNS backend configured in `nsswitch.conf`. This can lead to incorrect interpretation of DNS responses. Red Hat Enterprise Linux versions 6, 7, 8, 9, and 10, as well as OpenShift Container Platform, are affected if applications are configured to use the vulnerable DNS backend.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4437"
},
{
"category": "external",
"summary": "RHBZ#2449777",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449777"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4437",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4437"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4437",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4437"
},
{
"category": "external",
"summary": "https://sourceware.org/bugzilla/show_bug.cgi?id=34014",
"url": "https://sourceware.org/bugzilla/show_bug.cgi?id=34014"
}
],
"release_date": "2026-03-20T19:59:00.427000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-24T16:29:56+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29197"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "glibc: glibc: Incorrect DNS response parsing via crafted DNS server response"
},
{
"cve": "CVE-2026-4438",
"cwe": {
"id": "CWE-838",
"name": "Inappropriate Encoding for Output Context"
},
"discovery_date": "2026-03-20T21:02:16.458842+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449783"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the GNU C library (glibc). When applications use the `gethostbyaddr` or `gethostbyaddr_r` functions with a `nsswitch.conf` configuration that specifies glibc\u0027s DNS backend, the library may return an invalid DNS hostname. This violates the DNS specification and could lead to applications receiving incorrect hostname information, potentially impacting network operations or security decisions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a LOW impact flaw where glibc\u0027s `gethostbyaddr` and `gethostbyaddr_r` functions may return an invalid DNS hostname. This occurs when applications use a `nsswitch.conf` configuration that specifies glibc\u0027s DNS backend. This could lead to applications receiving incorrect hostname information, potentially affecting network operations or security decisions on Red Hat Enterprise Linux and OpenShift Container Platform.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4438"
},
{
"category": "external",
"summary": "RHBZ#2449783",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449783"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4438",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4438"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4438",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4438"
},
{
"category": "external",
"summary": "https://sourceware.org/bugzilla/show_bug.cgi?id=34015",
"url": "https://sourceware.org/bugzilla/show_bug.cgi?id=34015"
}
],
"release_date": "2026-03-20T19:59:06.064000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-24T16:29:56+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29197"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 4.0,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions"
},
{
"acknowledgments": [
{
"names": [
"Ali Raza"
]
}
],
"cve": "CVE-2026-4878",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"discovery_date": "2026-03-26T06:56:21.213270+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2451615"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the `cap_set_file()` function. This allows an attacker with write access to a parent directory to redirect file capability updates to an attacker-controlled file. By doing so, capabilities can be injected into or stripped from unintended executables, leading to privilege escalation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw. A Time-of-Check-to-Time-of-Use (TOCTOU) race condition in libcap\u0027s cap_set_file() allows a local unprivileged user to escalate privileges. An attacker with write access to a parent directory can exploit a narrow window during file capability updates to redirect capabilities to an attacker-controlled file. This can lead to the injection of elevated privileges into an unintended executable when privileged processes, such as setcap or container tooling, invoke cap_set_file() on attacker-influenced paths.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4878"
},
{
"category": "external",
"summary": "RHBZ#2451615",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451615"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4878",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4878"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4878",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4878"
},
{
"category": "external",
"summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2447554",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447554"
}
],
"release_date": "2026-04-06T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-24T16:29:56+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29197"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file()"
},
{
"acknowledgments": [
{
"names": [
"Joshua Rogers"
],
"organization": "AISLE Research Team"
}
],
"cve": "CVE-2026-5260",
"cwe": {
"id": "CWE-126",
"name": "Buffer Over-read"
},
"discovery_date": "2026-05-06T19:50:31.302000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467450"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an RSA key exchange to a server using an RSA key backed by a PKCS#11 token, could trigger a short heap overread. This memory corruption vulnerability could lead to information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "gnutls: gnutls: Information disclosure via heap overread in RSA key exchange",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-5260"
},
{
"category": "external",
"summary": "RHBZ#2467450",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467450"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-5260",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-5260"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-5260",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5260"
},
{
"category": "external",
"summary": "https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-10",
"url": "https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-10"
}
],
"release_date": "2026-04-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-24T16:29:56+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29197"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "gnutls: gnutls: Information disclosure via heap overread in RSA key exchange"
},
{
"acknowledgments": [
{
"names": [
"Doria Tang"
],
"organization": "Stony Brook University"
}
],
"cve": "CVE-2026-5419",
"cwe": {
"id": "CWE-208",
"name": "Observable Timing Discrepancy"
},
"discovery_date": "2026-05-07T11:02:44.331000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467686"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gnutls. The PKCS#7 padding check, performed during decryption, was not constant-time. This timing side-channel could allow a remote attacker to potentially leak sensitive information about the padding bytes through observable timing differences. This vulnerability is a form of information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "gnutls: gnutls: Information disclosure via timing side-channel in PKCS#7 padding removal",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-5419"
},
{
"category": "external",
"summary": "RHBZ#2467686",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467686"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-5419",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-5419"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-5419",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5419"
},
{
"category": "external",
"summary": "https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-13",
"url": "https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-13"
}
],
"release_date": "2026-04-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-24T16:29:56+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29197"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "gnutls: gnutls: Information disclosure via timing side-channel in PKCS#7 padding removal"
},
{
"cve": "CVE-2026-6322",
"cwe": {
"id": "CWE-140",
"name": "Improper Neutralization of Delimiters"
},
"discovery_date": "2026-05-05T11:01:00.332189+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI\u0027s intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the `fast-uri` library allows an attacker to bypass security controls in Red Hat products that process Uniform Resource Identifiers (URIs). By crafting a malicious URI with percent-encoded authority delimiters, an attacker can cause the library to incorrectly interpret the URI\u0027s authority, potentially redirecting applications to an unintended domain. This could lead to a bypass of host allowlist checks, redirect validation, or outbound request routing.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"known_not_affected": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6322"
},
{
"category": "external",
"summary": "RHBZ#2466684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6322",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6322"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6322",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6322"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc"
}
],
"release_date": "2026-05-05T10:29:16.378000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-24T16:29:56+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29197"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling"
},
{
"cve": "CVE-2026-7383",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2026-05-27T13:08:15.013000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2481879"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSL. A signed integer overflow vulnerability exists when sizing the destination buffer for Unicode output. This can lead to a heap buffer overflow, which may result in a crash or potentially allow an attacker to execute arbitrary code. Exploitation requires an application to directly call specific functions with a large amount of attacker-controlled input.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Low impact. This flaw in OpenSSL\u0027s ASN1_mbstring_ncopy() function, leading to a heap buffer overflow, is difficult to exploit in typical Red Hat environments. Exploitation requires an application to directly call the vulnerable function with an extremely large, attacker-controlled input (over half a gigabyte), a scenario not present in standard OpenSSL certificate or network protocol handling.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-7383"
},
{
"category": "external",
"summary": "RHBZ#2481879",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481879"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-7383",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-7383"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-7383",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-7383"
}
],
"release_date": "2026-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-24T16:29:56+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29197"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing"
},
{
"cve": "CVE-2026-9076",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-05-27T13:10:14.368000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2481880"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSL. When processing attacker-supplied Cryptographic Message Syntax (CMS) data using password-based decryption, an attacker can choose a stream-mode Key Encryption Key (KEK) cipher. This can trigger a heap out-of-bounds read, potentially causing an application crash and leading to a Denial of Service (DoS). This vulnerability does not require password knowledge and can be exploited before authentication.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a Low impact denial of service due to a heap out-of-bounds read in `kek_unwrap_key()` when processing attacker-supplied CMS data with an attacker-chosen stream-mode KEK cipher. This flaw requires specific memory conditions (input buffer ending at a page boundary with an unmapped following page) to trigger a crash, which is uncommon in typical Red Hat environments. No information disclosure is possible, and FIPS modules are not affected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-9076"
},
{
"category": "external",
"summary": "RHBZ#2481880",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481880"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-9076",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9076"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-9076",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9076"
}
],
"release_date": "2026-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-24T16:29:56+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29197"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption"
},
{
"cve": "CVE-2026-9277",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2026-05-22T14:01:14.427751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480741"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the shell-quote component. The quote() function did not properly validate object-token inputs, allowing line terminators to pass unescaped into the output. A remote attacker could exploit this vulnerability by providing specially crafted input, which a POSIX shell would interpret as a command separator. This could lead to command injection, enabling the attacker to execute arbitrary code on the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "shell-quote: shell-quote: Arbitrary code execution via command injection due to unescaped line terminators",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"known_not_affected": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-9277"
},
{
"category": "external",
"summary": "RHBZ#2480741",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480741"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-9277",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9277"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-9277",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9277"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote",
"url": "https://github.com/ljharb/shell-quote"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote/commit/1518179",
"url": "https://github.com/ljharb/shell-quote/commit/1518179"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote/security/advisories/GHSA-w7jw-789q-3m8p",
"url": "https://github.com/ljharb/shell-quote/security/advisories/GHSA-w7jw-789q-3m8p"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/shell-quote",
"url": "https://www.npmjs.com/package/shell-quote"
}
],
"release_date": "2026-05-22T13:22:38.873000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-24T16:29:56+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29197"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "shell-quote: shell-quote: Arbitrary code execution via command injection due to unescaped line terminators"
},
{
"cve": "CVE-2026-28390",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-04-07T23:01:18.313921+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456314"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSL. A remote attacker could exploit this vulnerability by sending a specially crafted Cryptographic Message Syntax (CMS) EnvelopedData message. During the processing of a KeyTransportRecipientInfo with RSA-OAEP encryption, the system attempts to access an optional parameter field without first verifying its presence. This leads to a NULL pointer dereference, which can cause applications processing the attacker-controlled CMS data to crash, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This CVE has been rated as moderate by redhat because the vulnerability is limited to a denial-of-service condition caused by a NULL pointer dereference in OpenSSL CMS processing, without evidence of memory corruption or code execution, furthermore the Affected functionality is niche. The vulnerable path requires:\nCMS/S/MIME processing,\nspecifically CMS_decrypt(),\nwith RSA-OAEP KeyTransportRecipientInfo.\nMany OpenSSL consumers never use CMS APIs, never process S/MIME,\nor do not decrypt attacker-controlled CMS objects.\nSo exposure is far narrower than a generic TLS parsing vulnerability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-28390"
},
{
"category": "external",
"summary": "RHBZ#2456314",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456314"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-28390",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28390"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-28390",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-28390"
},
{
"category": "external",
"summary": "https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc",
"url": "https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc"
},
{
"category": "external",
"summary": "https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6",
"url": "https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6"
},
{
"category": "external",
"summary": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4",
"url": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4"
},
{
"category": "external",
"summary": "https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788",
"url": "https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788"
},
{
"category": "external",
"summary": "https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75",
"url": "https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75"
},
{
"category": "external",
"summary": "https://openssl-library.org/news/secadv/20260407.txt",
"url": "https://openssl-library.org/news/secadv/20260407.txt"
}
],
"release_date": "2026-04-07T22:00:54.172000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-24T16:29:56+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29197"
},
{
"category": "workaround",
"details": "Applications that process Cryptographic Message Syntax (CMS) EnvelopedData messages should be configured to only accept input from trusted sources. Restricting network access to services that process untrusted CMS data can also reduce exposure to this Denial of Service vulnerability.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing"
},
{
"cve": "CVE-2026-29518",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"discovery_date": "2026-05-11T13:09:31.417000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2469055"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in rsync. An rsync daemon configured with \"use chroot = no\" is exposed\nto a time-of-check / time-of-use race on parent path components. A local\nattacker with write access to a module can replace a parent directory\ncomponent with a symlink between the receiver\u0027s check and its open(),\nredirecting reads (basis-file disclosure) and writes (file overwrite)\noutside the module. Under elevated daemon privilege this allows privilege\nescalation. Default \"use chroot = yes\" is not exposed.\nReach: local attacker on the daemon host, write access to a module path,\ndaemon configured with use chroot = no.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rsync: TOCTOU symlink race condition allowing local privilege escalation in daemon mode without chroot.",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw, a Time-of-Check Time-of-Use (TOCTOU) race condition, allows a local attacker with write access to an rsync module path to achieve privilege escalation. This vulnerability specifically impacts rsync daemons configured with `use chroot = no`. Red Hat\u0027s default rsync daemon configuration utilizes `use chroot = yes`, which is not susceptible to this issue.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"known_not_affected": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29518"
},
{
"category": "external",
"summary": "RHBZ#2469055",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2469055"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29518",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29518"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29518",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29518"
}
],
"release_date": "2026-05-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-24T16:29:56+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29197"
},
{
"category": "workaround",
"details": "To prevent exploitation, ensure the rsync daemon is configured with `use chroot = yes`. This setting, which is the default, isolates the rsync process and prevents the symlink race condition. If `use chroot = no` is present in the rsync configuration (e.g., `/etc/rsyncd.conf`), it must be changed to `use chroot = yes`. A restart of the rsync service is required for any configuration changes to take effect.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "rsync: TOCTOU symlink race condition allowing local privilege escalation in daemon mode without chroot."
},
{
"cve": "CVE-2026-33845",
"cwe": {
"id": "CWE-191",
"name": "Integer Underflow (Wrap or Wraparound)"
},
"discovery_date": "2026-03-24T05:35:59.740000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2450624"
}
],
"notes": [
{
"category": "description",
"text": "A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is remotely exploitable and may cause information disclosure or denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "gnutls: GnuTLS: Denial of Service via DTLS zero-length fragment",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue marked as Important severity due to its remote, pre-authentication reachability and its impact on a critical DTLS handshake parsing path. The vulnerability can be triggered by an unauthenticated attacker sending crafted DTLS handshake fragments, requiring no prior access or interaction. It leads to an out-of-bounds read caused by an integer underflow in fragment reassembly, operating entirely on attacker-controlled input. Such flaws in low-level protocol parsing are particularly serious, as they may result in disclosure of sensitive process memory, including cryptographic or session-related data, and can also cause reliable application crashes leading to denial of service. Given that DTLS is commonly used in network-facing services such as VPNs and real-time communication systems, the exposure surface is broad. The combination of unauthenticated remote exploitation, memory safety violation, and potential confidentiality and availability impact justifies classifying this issue as high severity rather than moderate.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33845"
},
{
"category": "external",
"summary": "RHBZ#2450624",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450624"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33845",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33845"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33845",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33845"
}
],
"release_date": "2026-04-30T17:28:41.473000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-24T16:29:56+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29197"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "gnutls: GnuTLS: Denial of Service via DTLS zero-length fragment"
},
{
"cve": "CVE-2026-33846",
"cwe": {
"id": "CWE-130",
"name": "Improper Handling of Length Parameter Inconsistency"
},
"discovery_date": "2026-03-24T05:38:09.899000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2450625"
}
],
"notes": [
{
"category": "description",
"text": "A heap buffer overflow vulnerability exists in the DTLS handshake fragment reassembly logic of GnuTLS. The issue arises in merge_handshake_packet() where incoming handshake fragments are matched and merged based solely on handshake type, without validating that the message_length field remains consistent across all fragments of the same logical message. An attacker can exploit this by sending crafted DTLS fragments with conflicting message_length values, causing the implementation to allocate a buffer based on a smaller initial fragment and subsequently write beyond its bounds using larger, inconsistent fragments. Because the merge operation does not enforce proper bounds checking against the allocated buffer size, this results in an out-of-bounds write on the heap. The vulnerability is remotely exploitable without authentication via the DTLS handshake path and can lead to application crashes or potential memory corruption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "gnutls: GnuTLS: Denial of Service via heap buffer overflow in DTLS handshake fragment reassembly",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability should be classified as an important flaw rather than moderate because it exposes a pre-authentication, remotely reachable heap buffer overflow in the DTLS handshake processing path, which is part of the core protocol handling logic and commonly exposed in network-facing services. The flaw enables an attacker to inject controlled data at attacker-chosen offsets and sizes beyond allocated heap boundaries by exploiting inconsistent message_length handling across fragments, effectively creating a constrained but meaningful heap write primitive. Unlike benign memory safety bugs, this condition is deterministically triggerable with a small number of crafted packets and no environmental dependencies for denial-of-service, and it targets a long-lived parsing state where memory corruption can affect adjacent heap structures. Even if reliable code execution requires additional heap manipulation or layout knowledge, the combination of remote reachability, lack of authentication, controlled memory corruption capability, and trivial crashability significantly elevates the risk profile beyond moderate severity. In real-world deployments, such primitives are often sufficient to enable heap grooming and exploitation chains, particularly in services that repeatedly process attacker-controlled input, making this a materially important security flaw.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33846"
},
{
"category": "external",
"summary": "RHBZ#2450625",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450625"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33846",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33846"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33846",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33846"
}
],
"release_date": "2026-05-04T08:53:59.249000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-24T16:29:56+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29197"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "gnutls: GnuTLS: Denial of Service via heap buffer overflow in DTLS handshake fragment reassembly"
},
{
"cve": "CVE-2026-34180",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2026-05-27T13:10:51.985000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2481881"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSL. An integer truncation vulnerability in the ASN.1 decoder can occur when processing a crafted DER-encoded ASN.1 structure with a primitive element exceeding 2 gigabytes. A remote attacker could exploit this to cause a heap buffer over-read. This may lead to an application crash, resulting in a Denial of Service (DoS), or potentially disclose sensitive information by loading memory contents beyond the input buffer. This issue primarily affects 64-bit Unix and Unix-like platforms.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure.",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Low impact vulnerability in OpenSSL\u0027s ASN.1 decoder affects 64-bit Unix-like platforms, where processing a crafted DER-encoded ASN.1 structure exceeding 2 gigabytes can lead to a heap buffer over-read. This may result in application crashes (Denial of Service) or unintended memory exposure. Red Hat products are only affected if they process untrusted, excessively large ASN.1 input using OpenSSL\u0027s d2i_* decoding functions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34180"
},
{
"category": "external",
"summary": "RHBZ#2481881",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481881"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34180",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34180"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34180",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34180"
}
],
"release_date": "2026-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-24T16:29:56+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29197"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.0,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure."
},
{
"cve": "CVE-2026-34181",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-05-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2481882"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSL. This vulnerability allows a remote attacker to forge PKCS#12 (Public-Key Cryptography Standards #12) files that use Password-Based Message Authentication Code 1 (PBMAC1) with short HMAC (Hash-based Message Authentication Code) keys. This can lead to a service accepting attacker-controlled certificates and private keys with a 1 in 256 probability, potentially enabling impersonation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Low: This flaw allows an attacker to forge PKCS#12 files with a 1 in 256 probability, leading to the acceptance of attacker-controlled certificates and private keys by services configured to use PBMAC1 authentication. Red Hat products utilizing OpenSSL versions 3.0, 1.1.1, or 1.0.2 are not affected, as these versions do not support PBMAC1 in PKCS#12.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34181"
},
{
"category": "external",
"summary": "RHBZ#2481882",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481882"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34181",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34181"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34181",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34181"
}
],
"release_date": "2026-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-24T16:29:56+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29197"
},
{
"category": "workaround",
"details": "To mitigate this issue, enforce strict validation on all uploaded PKCS#12 files to reject those containing abnormally short security keys. Additionally, enabling FIPS mode on your system can help protect your environment, as the vulnerable OpenSSL code operates entirely outside the approved FIPS cryptographic boundary.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "openssl: PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys"
},
{
"cve": "CVE-2026-34182",
"cwe": {
"id": "CWE-130",
"name": "Improper Handling of Length Parameter Inconsistency"
},
"discovery_date": "2026-05-27T13:59:43+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2481884"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSL\u0027s Cryptographic Message Services (CMS) AuthEnvelopedData processing. An on-path attacker can exploit insufficient input validation on cipher and tag length fields by sending specially crafted CMS messages. This can lead to the forging of messages or bypassing integrity validation. Consequently, an attacker may achieve key-equivalent functionality for a given CMS recipient.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Moderate: This flaw in OpenSSL\u0027s Cryptographic Message Services (CMS) AuthEnvelopedData processing could allow an on-path attacker to forge messages or bypass integrity validation. This is due to insufficient input validation on cipher and tag length fields, potentially leading to key-equivalent functionality or integrity bypass in applications utilizing affected OpenSSL versions for CMS AuthEnvelopedData.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34182"
},
{
"category": "external",
"summary": "RHBZ#2481884",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481884"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34182",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34182"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34182",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34182"
}
],
"release_date": "2026-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-24T16:29:56+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29197"
},
{
"category": "workaround",
"details": "Systems configured to operate in FIPS mode are not affected by this vulnerability. To mitigate this issue, ensure that OpenSSL is operating in FIPS mode by enabling the system-wide FIPS policy. This may have broader implications for cryptographic operations on the system and should be evaluated for compatibility with existing applications. A system reboot may be required for the changes to take effect.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages"
},
{
"cve": "CVE-2026-34183",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-27T14:04:59+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2481885"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSL\u0027s QUIC PATH_CHALLENGE handler. A remote attacker can exploit this vulnerability by flooding a QUIC client or server with specially crafted PATH_CHALLENGE frames. This leads to unbounded memory allocation within the local QUIC stack, as the system continuously allocates PATH_RESPONSE frames without them being acknowledged. The primary consequence is a Denial of Service (DoS), causing the affected application to terminate abnormally due to memory exhaustion.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A Moderate severity flaw exists in the QUIC PATH_CHALLENGE handler, allowing a remote attacker to exhaust heap memory of a QUIC client or server. By flooding the local QUIC stack with PATH_CHALLENGE frames, a malicious peer can trigger unbounded memory allocation, leading to a denial of service for applications utilizing the vulnerable QUIC implementation.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34183"
},
{
"category": "external",
"summary": "RHBZ#2481885",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481885"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34183",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34183"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34183",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34183"
}
],
"release_date": "2026-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-24T16:29:56+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29197"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, apply UDP rate limiting at your network edge to throttle malicious traffic. If QUIC is not strictly required, disable the listener entirely and configure your application to use standard TLS over TCP. Additionally, enforce strict process memory limits using cgroups to prevent host-wide memory exhaustion during an attack.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssl: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler"
},
{
"cve": "CVE-2026-40355",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-04-28T07:01:45.120520+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2463370"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in MIT Kerberos 5 (krb5). An unauthenticated remote attacker can exploit a NULL pointer dereference vulnerability by calling `gss_accept_sec_context()` on a system with a NegoEx mechanism registered. This can lead to the termination of the process, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Moderate: This flaw allows an unauthenticated remote attacker to cause a Denial of Service in MIT Kerberos 5 by triggering a NULL pointer dereference. Exploitation requires the NegoEx mechanism to be explicitly registered in the system\u0027s GSSAPI configuration, which is not a default state in all Red Hat environments.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-40355"
},
{
"category": "external",
"summary": "RHBZ#2463370",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2463370"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-40355",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40355"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40355",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40355"
},
{
"category": "external",
"summary": "https://cems.fun/2026/04/27/krb5-two-unauthenticated-network-vulnerabilities.html",
"url": "https://cems.fun/2026/04/27/krb5-two-unauthenticated-network-vulnerabilities.html"
},
{
"category": "external",
"summary": "https://github.com/krb5/krb5/commit/2e75f0d9362fb979f5fc92829431a590a130929f",
"url": "https://github.com/krb5/krb5/commit/2e75f0d9362fb979f5fc92829431a590a130929f"
},
{
"category": "external",
"summary": "https://web.mit.edu/kerberos/advisories/",
"url": "https://web.mit.edu/kerberos/advisories/"
}
],
"release_date": "2026-04-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-24T16:29:56+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29197"
},
{
"category": "workaround",
"details": "To mitigate this issue, remove the NegoEx mechanism registration from the system\u0027s GSSAPI configuration if it is not required. This can typically be achieved by removing or commenting out the relevant entry in `/etc/gss/mech`. A restart of services utilizing Kerberos might be necessary for the changes to take effect, which could impact Kerberos-dependent functionality.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism"
},
{
"cve": "CVE-2026-40356",
"cwe": {
"id": "CWE-191",
"name": "Integer Underflow (Wrap or Wraparound)"
},
"discovery_date": "2026-04-28T07:01:37.543641+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2463368"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in MIT Kerberos 5 (krb5). An unauthenticated remote attacker can exploit an integer underflow and an out-of-bounds read vulnerability by calling `gss_accept_sec_context()` on a system with a NegoEx mechanism registered. This can lead to the process terminating, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate impact denial of service flaw in MIT Kerberos 5 (krb5) allows an unauthenticated remote attacker to trigger an integer underflow and out-of-bounds read. This vulnerability, which can lead to process termination, specifically affects systems where the NegoEx mechanism is registered and `gss_accept_sec_context()` is called. While Kerberos is a fundamental service, the prerequisite of a registered NegoEx mechanism limits the attack surface.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-40356"
},
{
"category": "external",
"summary": "RHBZ#2463368",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2463368"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-40356",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40356"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40356",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40356"
},
{
"category": "external",
"summary": "https://cems.fun/2026/04/27/krb5-two-unauthenticated-network-vulnerabilities.html",
"url": "https://cems.fun/2026/04/27/krb5-two-unauthenticated-network-vulnerabilities.html"
},
{
"category": "external",
"summary": "https://github.com/krb5/krb5/commit/2e75f0d9362fb979f5fc92829431a590a130929f",
"url": "https://github.com/krb5/krb5/commit/2e75f0d9362fb979f5fc92829431a590a130929f"
},
{
"category": "external",
"summary": "https://web.mit.edu/kerberos/advisories/",
"url": "https://web.mit.edu/kerberos/advisories/"
}
],
"release_date": "2026-04-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-24T16:29:56+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29197"
},
{
"category": "workaround",
"details": "To mitigate this issue, ensure that the NegoEx mechanism is not registered in the `/etc/gss/mech` configuration file. Removing the corresponding entry from this file will prevent the vulnerable code path from being activated. This action may impact services that rely on the NegoEx GSS-API mechanism. A restart of affected Kerberos-dependent services may be required for the change to take effect.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read"
},
{
"cve": "CVE-2026-41035",
"cwe": {
"id": "CWE-805",
"name": "Buffer Access with Incorrect Length Value"
},
"discovery_date": "2026-04-16T08:00:54.200357+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2458898"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in rsync. When rsync is configured to handle extended attributes (using the -X or --xattrs option), a remote attacker can exploit a use-after-free vulnerability. This occurs because the receive_xattr function incorrectly processes an untrusted length value during a sorting operation, leading to memory corruption. Successful exploitation can result in a denial of service, causing the rsync process to crash, and may potentially allow for arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rsync: Rsync: Use-after-free vulnerability in extended attribute handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in rsync that allows a remote attacker to cause a denial of service or potentially execute arbitrary code. The vulnerability is present when rsync is used with extended attributes enabled via the `-X` or `--xattrs` option, which is not a default configuration. Exploitation requires the victim to explicitly enable this feature.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"known_not_affected": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-41035"
},
{
"category": "external",
"summary": "RHBZ#2458898",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458898"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-41035",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41035"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41035",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41035"
},
{
"category": "external",
"summary": "https://github.com/RsyncProject/rsync/issues/871",
"url": "https://github.com/RsyncProject/rsync/issues/871"
},
{
"category": "external",
"summary": "https://github.com/RsyncProject/rsync/releases",
"url": "https://github.com/RsyncProject/rsync/releases"
},
{
"category": "external",
"summary": "https://www.openwall.com/lists/oss-security/2026/04/16/2",
"url": "https://www.openwall.com/lists/oss-security/2026/04/16/2"
}
],
"release_date": "2026-04-16T06:53:05.237000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-24T16:29:56+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29197"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, avoid using the -X or --xattrs options with rsync if extended attribute handling is not essential for your operations. Disabling these options prevents the vulnerable code path from being exercised. This may impact functionality that relies on extended attributes.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "rsync: Rsync: Use-after-free vulnerability in extended attribute handling"
},
{
"acknowledgments": [
{
"names": [
"Joshua Rogers"
],
"organization": "AISLE Research Team"
}
],
"cve": "CVE-2026-42009",
"cwe": {
"id": "CWE-475",
"name": "Undefined Behavior for Input to API"
},
"discovery_date": "2026-05-06T16:32:32.382000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467279"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security (DTLS) packet reordering logic. The comparator function, responsible for ordering DTLS packets by sequence numbers, did not correctly handle packets with duplicate sequence numbers. This could lead to unstable packet ordering or undefined behavior, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "gnutls: gnutls: Denial of Service via DTLS packet reordering vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The impact for this flaw has been downgraded on Red Hat Enterprise Linux due to the following reason:\n\n- The number of elements passed to the vulnerable function at runtime is known and is at most 6 and the element size is sufficiently small. glibc\u2019s qsort implementation will not exercise the quick sort code path, which would otherwise cause an infloop or out-of-bound write.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42009"
},
{
"category": "external",
"summary": "RHBZ#2467279",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467279"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42009",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42009"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42009",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42009"
},
{
"category": "external",
"summary": "https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-2",
"url": "https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-2"
}
],
"release_date": "2026-04-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-24T16:29:56+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29197"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "gnutls: gnutls: Denial of Service via DTLS packet reordering vulnerability"
},
{
"acknowledgments": [
{
"names": [
"Joshua Rogers"
],
"organization": "AISLE Research Team"
}
],
"cve": "CVE-2026-42010",
"cwe": {
"id": "CWE-170",
"name": "Improper Null Termination"
},
"discovery_date": "2026-05-06T16:57:37.044000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467289"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest\u2013Shamir\u2013Adleman \u2013 Pre-Shared Key) wrongfully matched usernames containing a NUL character with truncated usernames. A remote attacker could exploit this by sending a specially crafted username, leading to an authentication bypass. This vulnerability allows an attacker to gain unauthorized access by circumventing the authentication process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "gnutls: gnutls: Authentication Bypass via NUL Character in Username",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42010"
},
{
"category": "external",
"summary": "RHBZ#2467289",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467289"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42010",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42010"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42010",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42010"
},
{
"category": "external",
"summary": "https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-4",
"url": "https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-4"
}
],
"release_date": "2026-04-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-24T16:29:56+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29197"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "gnutls: gnutls: Authentication Bypass via NUL Character in Username"
},
{
"acknowledgments": [
{
"names": [
"Haruto Kimura"
],
"organization": "Stella"
}
],
"cve": "CVE-2026-42011",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-06T19:06:25.319000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467437"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gnutls. This vulnerability occurs because permitted name constraints were incorrectly ignored when previous Certificate Authorities (CAs) only had excluded name constraints. A remote attacker could exploit this to bypass critical name constraint checks during certificate validation. This bypass could lead to the acceptance of invalid certificates, potentially enabling spoofing or man-in-the-middle attacks against affected systems.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "gnutls: gnutls: Security bypass due to incorrect name constraint handling",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42011"
},
{
"category": "external",
"summary": "RHBZ#2467437",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467437"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42011",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42011"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42011",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42011"
},
{
"category": "external",
"summary": "https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-6",
"url": "https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-6"
}
],
"release_date": "2026-04-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-24T16:29:56+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29197"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "gnutls: gnutls: Security bypass due to incorrect name constraint handling"
},
{
"acknowledgments": [
{
"names": [
"Oleh Konko"
],
"organization": "1Seal"
}
],
"cve": "CVE-2026-42012",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-06T19:16:02.753000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467441"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted certificate that contains Uniform Resource Identifier (URI) or Service (SRV) Subject Alternative Names (SANs). This could cause the certificate validation process to incorrectly fall back to checking DNS hostnames against the Common Name (CN), potentially allowing the attacker to spoof legitimate services or intercept sensitive information.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "gnutls: gnutls: Certificate validation bypass due to improper handling of URI and SRV SANs",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42012"
},
{
"category": "external",
"summary": "RHBZ#2467441",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467441"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42012",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42012"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42012",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42012"
},
{
"category": "external",
"summary": "https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-7",
"url": "https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-7"
}
],
"release_date": "2026-04-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-24T16:29:56+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29197"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "gnutls: gnutls: Certificate validation bypass due to improper handling of URI and SRV SANs"
},
{
"acknowledgments": [
{
"names": [
"Haruto Kimura"
],
"organization": "Stella"
},
{
"names": [
"Joshua Rogers"
],
"organization": "AISLE Research Team"
}
],
"cve": "CVE-2026-42013",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-06T19:47:00.134000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467448"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gnutls. When validating certificates, an oversized Subject Alternative Name (SAN) could cause the validation process to incorrectly fall back to checking the Common Name (CN) field. This could allow a remote attacker to bypass proper certificate validation, potentially leading to spoofing or man-in-the-middle attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "gnutls: gnutls: Certificate validation bypass due to oversized Subject Alternative Name",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42013"
},
{
"category": "external",
"summary": "RHBZ#2467448",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467448"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42013",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42013"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42013",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42013"
},
{
"category": "external",
"summary": "https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-8",
"url": "https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-8"
}
],
"release_date": "2026-04-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-24T16:29:56+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29197"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "gnutls: gnutls: Certificate validation bypass due to oversized Subject Alternative Name"
},
{
"acknowledgments": [
{
"names": [
"Luigino Camastra"
]
},
{
"names": [
"Joshua Rogers"
],
"organization": "AISLE Research Team"
}
],
"cve": "CVE-2026-42014",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-05-06T19:51:54.069000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467451"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in GnuTLS. The `gnutls_pkcs11_token_set_pin` function, used for changing the Security Officer PIN, can lead to a use-after-free vulnerability. This occurs when an attacker attempts to change the PIN with a NULL old PIN for a token that lacks a protected authentication path.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "gnutls: gnutls: Use-after-free in gnutls_pkcs11_token_set_pin",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42014"
},
{
"category": "external",
"summary": "RHBZ#2467451",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467451"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42014",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42014"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42014",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42014"
},
{
"category": "external",
"summary": "https://gitlab.com/gnutls/gnutls/-/issues/1766",
"url": "https://gitlab.com/gnutls/gnutls/-/issues/1766"
},
{
"category": "external",
"summary": "https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-9",
"url": "https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-9"
}
],
"release_date": "2026-04-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-24T16:29:56+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29197"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "gnutls: gnutls: Use-after-free in gnutls_pkcs11_token_set_pin"
},
{
"acknowledgments": [
{
"names": [
"Zou Dikai"
]
}
],
"cve": "CVE-2026-42015",
"cwe": {
"id": "CWE-193",
"name": "Off-by-one Error"
},
"discovery_date": "2026-05-07T10:50:28.379000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467678"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gnutls. An off-by-one error exists in the PKCS#12 bag element bounds check. This vulnerability allows an remote attacker to write past the internal array of a PKCS#12 bag when appending to a bag that already contains 32 elements. This memory corruption could lead to a denial of service (DoS) or potentially other unspecified impacts.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "gnutls: gnutls: Memory corruption due to off-by-one error in PKCS#12 bag handling",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42015"
},
{
"category": "external",
"summary": "RHBZ#2467678",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467678"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42015",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42015"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42015",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42015"
},
{
"category": "external",
"summary": "https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-11",
"url": "https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-11"
}
],
"release_date": "2026-04-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-24T16:29:56+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29197"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "gnutls: gnutls: Memory corruption due to off-by-one error in PKCS#12 bag handling"
},
{
"cve": "CVE-2026-42764",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-27T14:08:07+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2481887"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the OpenSSL QUIC (Quick UDP Internet Connections) server. A remote attacker could send a specially crafted QUIC initial packet with an invalid token. If the server\u0027s address validation is explicitly disabled, this could lead to a NULL pointer dereference, causing the server process to terminate abnormally and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: NULL pointer dereference in QUIC server initial packet handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a Moderate severity issue. A NULL pointer dereference can occur in the OpenSSL QUIC server when processing initial packets with invalid tokens, leading to a denial of service. This vulnerability is only exploitable if the client address validation is explicitly disabled using the `SSL_LISTENER_FLAG_NO_VALIDATE` flag, which is not the default configuration for OpenSSL QUIC servers.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42764"
},
{
"category": "external",
"summary": "RHBZ#2481887",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481887"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42764",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42764"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42764",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42764"
}
],
"release_date": "2026-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-24T16:29:56+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29197"
},
{
"category": "workaround",
"details": "To mitigate this issue, ensure that the OpenSSL QUIC server has client address validation enabled. This is the default configuration. If the `SSL_LISTENER_FLAG_NO_VALIDATE` flag is being used with the `SSL_new_listener()` call, it should be removed to prevent the vulnerability from being exploitable.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssl: NULL pointer dereference in QUIC server initial packet handling"
},
{
"cve": "CVE-2026-42766",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-27T14:17:46+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2481890"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSL. A remote attacker could exploit a NULL pointer dereference vulnerability in the Cryptographic Message Syntax (CMS) decryption process by providing a specially crafted password-encrypted CMS message. This occurs because the keyDerivationAlgorithm field, which is optional, is dereferenced without proper validation. Successful exploitation leads to an application crash, resulting in a Denial of Service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: Possible NULL Dereference in Password-Based CMS Decryption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue is rated as Low impact. A NULL pointer dereference in OpenSSL\u0027s CMS decryption can be triggered by a specially crafted password-encrypted CMS message, leading to an Red Hat application crash and Denial of Service. This affects applications that perform password-based CMS decryption.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42766"
},
{
"category": "external",
"summary": "RHBZ#2481890",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481890"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42766",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42766"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42766",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42766"
}
],
"release_date": "2026-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-24T16:29:56+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29197"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "openssl: Possible NULL Dereference in Password-Based CMS Decryption"
},
{
"cve": "CVE-2026-42767",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-27T14:17:46+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2481891"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSL. An attacker controlling a Certificate Management Protocol (CMP) server, or acting as a man-in-the-middle, could craft a malicious CMP response. This response, containing a Certificate Request Message Format (CRMF) CertRepMessage with a specific malformed EncryptedValue structure, would trigger a NULL pointer dereference in the OpenSSL CMP client. This vulnerability leads to a crash of the application, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a Low severity issue. A null pointer dereference flaw in the OpenSSL Certificate Management Protocol (CMP) client could be triggered by an attacker-controlled CMP server. This could lead to a denial of service in applications that process untrusted CMP/CRMF messages.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42767"
},
{
"category": "external",
"summary": "RHBZ#2481891",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481891"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42767",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42767"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42767",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42767"
}
],
"release_date": "2026-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-24T16:29:56+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29197"
},
{
"category": "workaround",
"details": "To mitigate this issue, ensure that OpenSSL CMP client applications only communicate with trusted Certificate Management Protocol (CMP) servers. If CMP client functionality is not required, consider disabling or restricting its use to reduce exposure.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption"
},
{
"cve": "CVE-2026-42768",
"cwe": {
"id": "CWE-205",
"name": "Observable Behavioral Discrepancy"
},
"discovery_date": "2026-05-27T14:17:46+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2481892"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSL\u0027s CMS_decrypt() and PKCS7_decrypt() functions. This vulnerability, a Bleichenbacher-style oracle, could allow a remote attacker to decrypt or sign messages using the victim\u0027s private RSA key. Exploitation requires the attacker to provide specially crafted CMS or S/MIME messages and observe the application\u0027s error codes or decryption output. While the attack is technically possible, the specific conditions required make it unlikely to be exploited in typical deployments.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Low severity vulnerability in OpenSSL\u0027s CMS_decrypt() and PKCS7_decrypt() functions exposes a Bleichenbacher-style oracle. Exploitation requires an attacker to control input CMS/S/MIME messages and observe decryption errors or output, a scenario deemed unlikely in most Red Hat product deployments. The attack could allow decryption or signing of messages with a victim\u0027s private RSA key.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42768"
},
{
"category": "external",
"summary": "RHBZ#2481892",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481892"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42768",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42768"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42768",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42768"
}
],
"release_date": "2026-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-24T16:29:56+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29197"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, applications utilizing CMS_decrypt() or PKCS7_decrypt() should ensure a recipient certificate is always provided to identify the specific RecipientInfo for decryption. This practice helps prevent the Bleichenbacher-style oracle attack by ensuring proper key identification.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "openssl: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()"
},
{
"cve": "CVE-2026-42769",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-27T14:17:46+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2481893"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Certificate Management Protocol (CMP) implementation within OpenSSL. An attacker with existing Registration Authority (RA) level credentials could exploit an error in the certificate verification process during a Root Certificate Authority (CA) key update. This vulnerability allows the attacker to replace the root CA certificate for CMP clients with a fraudulent one. The primary consequence is an escalation of privileges, enabling the attacker to gain control equivalent to the root CA.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue has a Low impact as it requires an attacker to already possess valid Registration Authority (RA) level credentials to exploit. A flaw in the Certificate Management Protocol (CMP) root CA key update process could allow an RA to substitute the root CA certificate for CMP clients with an arbitrary certificate, potentially leading to a trust-anchor substitution. FIPS modules are not affected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42769"
},
{
"category": "external",
"summary": "RHBZ#2481893",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481893"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42769",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42769"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42769",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42769"
}
],
"release_date": "2026-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-24T16:29:56+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29197"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "openssl: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate"
},
{
"cve": "CVE-2026-42770",
"cwe": {
"id": "CWE-354",
"name": "Improper Validation of Integrity Check Value"
},
"discovery_date": "2026-05-27T14:17:46+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2481894"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSL. A malicious peer can exploit this vulnerability by presenting a specially crafted DHX (X9.42) peer key. Due to improper validation of the peer key\u0027s subgroup membership, an attacker can recover the victim\u0027s private key after a small number of key exchange attempts. This information disclosure can lead to unauthorized access or further compromise of affected systems.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: FFC-DH Peer Validation Uses Attacker-Supplied q",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Low severity flaw in OpenSSL affects systems configured to use DHX (X9.42) peer keys for key derivation, allowing a malicious peer to potentially recover a victim\u0027s private key. The attack requires specific conditions, such as long-lived RA/CA DHX keys in CMP deployments or bespoke applications utilizing X9.42 DHX static keys with interactive protocols, limiting its broader impact.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42770"
},
{
"category": "external",
"summary": "RHBZ#2481894",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481894"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42770",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42770"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42770",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42770"
}
],
"release_date": "2026-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-24T16:29:56+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29197"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "openssl: FFC-DH Peer Validation Uses Attacker-Supplied q"
},
{
"cve": "CVE-2026-43618",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2026-05-11T13:09:39.838000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2469054"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in rsync. An authenticated daemon peer can exploit an integer overflow vulnerability in the compressed-token decoder. By carefully manipulating the compressed-token, a malicious sender can trigger an overflow, leading to remote memory disclosure. This allows an attacker to leak sensitive process memory contents, including environment variables, passwords, and memory pointers, which significantly weakens Address Space Layout Randomization (ASLR) and can facilitate further exploitation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rsync: rsync: Remote memory disclosure via integer overflow in compressed-token decoding",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw in rsync\u0027s compressed-token decoding allows an authenticated remote attacker to trigger an integer overflow. This can lead to memory disclosure, potentially exposing sensitive information such as environment variables or heap pointers, thereby weakening Address Space Layout Randomization (ASLR) and aiding further exploitation. The vulnerability is present when rsync is configured as a daemon with compression enabled, which is the default for protocols version 30 and higher.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"known_not_affected": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-43618"
},
{
"category": "external",
"summary": "RHBZ#2469054",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2469054"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-43618",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43618"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43618",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43618"
}
],
"release_date": "2026-05-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-24T16:29:56+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29197"
},
{
"category": "workaround",
"details": "Disable compression on the rsync daemon by adding `refuse options = compress` to the `rsyncd.conf` file. A restart of the rsync daemon service is required for the change to take effect and may impact transfer performance.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "rsync: rsync: Remote memory disclosure via integer overflow in compressed-token decoding"
},
{
"cve": "CVE-2026-44486",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:30.944384+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487947"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in the Axios Node.js HTTP adapter. Red Hat products utilizing Axios in a Node.js environment with an authenticated proxy and automatic redirects enabled are susceptible. The vulnerability arises when a request, initially sent through an authenticated proxy, is redirected to a target that no longer uses the proxy, potentially leaking `Proxy-Authorization` headers containing sensitive credentials to an untrusted remote server. This risk is heightened in deployments where applications interact with untrusted HTTP origins.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"known_not_affected": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "RHBZ#2487947",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487947"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44486",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44486"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc",
"url": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc"
}
],
"release_date": "2026-06-11T15:39:07.714000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-24T16:29:56+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29197"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects"
},
{
"cve": "CVE-2026-44487",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:34.091476+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487948"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via redirect flows",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in Axios affecting Node.js environments. When an application uses Axios with an authenticated HTTP proxy and follows redirects from an HTTP to a non-proxied HTTPS destination, the Proxy-Authorization header may be inadvertently sent to the final origin server. This could lead to the exposure of sensitive proxy credentials to an unintended third party.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"known_not_affected": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "RHBZ#2487948",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487948"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44487",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44487"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v",
"url": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v"
}
],
"release_date": "2026-06-11T15:38:25.150000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-24T16:29:56+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29197"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via redirect flows"
},
{
"cve": "CVE-2026-44488",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-11T17:01:36.836488+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487949"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Denial of Service due to unenforced request and response size limits",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A denial of service flaw was found in Axios, a JavaScript HTTP client library. This issue arises when applications utilize the `fetch` adapter, as configured request and response size limits are not properly enforced. A remote attacker could exploit this by sending or receiving excessively large data bodies, leading to resource exhaustion and potential denial of service in affected server-side applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"known_not_affected": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "RHBZ#2487949",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487949"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf"
}
],
"release_date": "2026-06-11T15:37:38.013000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-24T16:29:56+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29197"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Denial of Service due to unenforced request and response size limits"
},
{
"cve": "CVE-2026-44492",
"cwe": {
"id": "CWE-289",
"name": "Authentication Bypass by Alternate Name"
},
"discovery_date": "2026-06-11T17:00:56.761751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487938"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Axios, a JavaScript HTTP client library, that allows for a proxy bypass. When a `NO_PROXY` environment variable is configured to prevent direct connections to specific IPv4 addresses, an attacker can craft a request URL using the IPv4-mapped IPv6 address format. This bypasses the intended `NO_PROXY` exclusion, routing the request through the configured proxy and potentially exposing internal services or sensitive information, such as cloud instance metadata credentials.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"known_not_affected": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "RHBZ#2487938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487938"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44492"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv",
"url": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv"
}
],
"release_date": "2026-06-11T15:29:13.890000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-24T16:29:56+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29197"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization"
},
{
"cve": "CVE-2026-44494",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:01:12.945664+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487942"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. This vulnerability, a Prototype Pollution \"Gadget\" attack, allows an attacker to escalate any existing Object.prototype pollution in an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the Axios library allows an attacker to escalate existing prototype pollution vulnerabilities within an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. By injecting a malicious proxy configuration into the `Object.prototype`, an attacker can intercept, read, and modify all HTTP traffic, including sensitive authentication credentials, without direct user interaction. This poses a significant risk to data confidentiality and integrity in Red Hat products that utilize the Axios library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"known_not_affected": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "RHBZ#2487942",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487942"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44494",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44494"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh",
"url": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh"
}
],
"release_date": "2026-06-11T15:32:03.155000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-24T16:29:56+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29197"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution"
},
{
"cve": "CVE-2026-44495",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:00:53.999811+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487937"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure due to prototype pollution vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Axios, a promise-based HTTP client, can lead to information disclosure, including credential theft and response hijacking, or denial of service. Exploitation requires a separate prototype pollution vulnerability in the same JavaScript process, allowing an attacker to control `Object.prototype.transformResponse`. Red Hat products using affected Axios versions are at risk if another component introduces such pollution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"known_not_affected": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "RHBZ#2487937",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487937"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44495",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw"
}
],
"release_date": "2026-06-11T15:33:12.433000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-24T16:29:56+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29197"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure due to prototype pollution vulnerability"
},
{
"cve": "CVE-2026-44496",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-06-11T17:01:15.856386+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487943"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in Axios can lead to a client-side Denial of Service. An attacker capable of influencing the XSRF cookie name within a browser environment could trigger excessive regular expression processing, causing the affected browser tab to freeze and degrade user availability. This issue specifically impacts browser-based applications and does not affect Node.js HTTP adapter usage, React Native, or web workers.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"known_not_affected": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "RHBZ#2487943",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487943"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44496",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44496"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf"
}
],
"release_date": "2026-06-11T15:34:28.492000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-24T16:29:56+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29197"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name"
},
{
"cve": "CVE-2026-45186",
"cwe": {
"id": "CWE-407",
"name": "Inefficient Algorithmic Complexity"
},
"discovery_date": "2026-05-10T07:00:47.768180+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2468575"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in libexpat. When processing a specially crafted XML input containing a specific pattern of attributes, the parsing time increases quadratically due to checks for attribute name collisions. This consumes excessive CPU resources and eventually results in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libexpat: denial of service via crafted XML input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to be able to process a specially crafted XML file or input with an application linked to the libexpat library. Also, the only security impact of this flaw is a high consumption of CPU resources that can eventually cause a denial of service. Due to this reason, this vulnerability has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45186"
},
{
"category": "external",
"summary": "RHBZ#2468575",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2468575"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45186"
},
{
"category": "external",
"summary": "https://github.com/libexpat/libexpat/pull/1216",
"url": "https://github.com/libexpat/libexpat/pull/1216"
}
],
"release_date": "2026-05-10T06:36:16.927000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-24T16:29:56+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29197"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, restrict the maximum size of incoming XML payloads. It is especially critical to limit the decompressed size if the application accepts compressed XML files. Also, consider running the application inside a container or a restricted environment to ensure that the high consumption of CPU resources does not affect the host system.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "libexpat: denial of service via crafted XML input"
},
{
"cve": "CVE-2026-45445",
"cwe": {
"id": "CWE-1204",
"name": "Generation of Weak Initialization Vector (IV)"
},
"discovery_date": "2026-05-27T14:17:46+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2481896"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSL. Applications that use the AES-OCB encryption method with a specific one-shot interface (EVP_Cipher()) will have their provided Initialization Vector (IV) silently discarded. This leads to the same internal cryptographic value being used repeatedly, which compromises the confidentiality of encrypted data. Additionally, this issue allows for the universal forgery of authentication tags, undermining the integrity of communications.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: AES-OCB IV Ignored on EVP_Cipher() Path",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a Moderate severity flaw where applications utilizing the AES-OCB cipher through OpenSSL\u0027s EVP_Cipher() one-shot interface may silently discard the provided initialization vector (IV). This leads to nonce reuse, compromising confidentiality and enabling universal forgery of authentication tags. Red Hat products are primarily affected if they include or rely on third-party applications that specifically employ this less common and discouraged API usage with AES-OCB, as standard OpenSSL SSL/TLS implementations and applications using the recommended streaming AEAD API are not impacted.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45445"
},
{
"category": "external",
"summary": "RHBZ#2481896",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481896"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45445",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45445"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45445",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45445"
}
],
"release_date": "2026-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-24T16:29:56+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29197"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssl: AES-OCB IV Ignored on EVP_Cipher() Path"
},
{
"cve": "CVE-2026-45446",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-05-27T14:17:46+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2481897"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSL. The implementations of AES-SIV (Advanced Encryption Standard - SIV) and AES-GCM-SIV (Advanced Encryption Standard - Galois/Counter Mode - SIV) incorrectly process authentication tags for empty messages. This vulnerability allows a remote attacker to forge empty messages with arbitrary Additional Authenticated Data (AAD) in applications that utilize these specific cipher modes within custom protocols and do not properly handle zero-length ciphertexts. This could lead to unauthorized data manipulation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw is rated as Low impact. It affects applications that utilize OpenSSL\u0027s AES-SIV or AES-GCM-SIV modes within custom protocols and specifically mishandle empty ciphertexts. Standard OpenSSL protocols, such as TLS, are not affected. Successful exploitation requires an application to use the EVP interface and to skip ciphertext updates when processing zero-length ciphertexts, representing an uncommon and non-default configuration.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45446"
},
{
"category": "external",
"summary": "RHBZ#2481897",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481897"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45446",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45446"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45446",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45446"
}
],
"release_date": "2026-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-24T16:29:56+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29197"
},
{
"category": "workaround",
"details": "The vulnerability arises from specific application implementations using OpenSSL\u0027s AES-SIV or AES-GCM-SIV modes with custom protocols and an atypical handling of empty ciphertexts. As this scenario is not a default or commonly deployed configuration in Red Hat products, and no direct configuration or operational control exists to mitigate this specific flaw without patching, the following applies:\n\nMitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes"
},
{
"cve": "CVE-2026-45447",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-05-27T14:17:46+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2481898"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSL. When processing a specially crafted PKCS#7 or S/MIME (Secure/Multipurpose Internet Mail Extensions) signed message, a heap use-after-free vulnerability in the PKCS7_verify() function can be triggered. This occurs if the SignedData digestAlgorithms field is present as an empty ASN.1 SET, leading to incorrect memory deallocation. A remote attacker could exploit this to cause application crashes, memory corruption, or potentially achieve remote code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This High severity heap use-after-free flaw in OpenSSL\u0027s PKCS7_verify() function can be triggered by processing a specially crafted PKCS#7 or S/MIME signed message. This could lead to application crashes, memory corruption, or potentially remote code execution, impacting services that handle such messages. The vulnerability specifically affects applications utilizing OpenSSL PKCS#7 APIs, while those using CMS APIs are not impacted.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45447"
},
{
"category": "external",
"summary": "RHBZ#2481898",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481898"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45447",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45447"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45447",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45447"
}
],
"release_date": "2026-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-24T16:29:56+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29197"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()"
},
{
"cve": "CVE-2026-45736",
"cwe": {
"id": "CWE-824",
"name": "Access of Uninitialized Pointer"
},
"discovery_date": "2026-05-15T16:00:55.786944+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477914"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ws, an open source WebSocket client and server for Node.js. The `websocket.close()` implementation is vulnerable to uninitialized memory disclosure when a `TypedArray` is passed as the reason argument. This can lead to the disclosure of sensitive information from uninitialized memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray`",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in the `ws` WebSocket library for Node.js could lead to sensitive information disclosure. The flaw occurs when a `TypedArray` is specifically provided as the `reason` argument to the `websocket.close()` function, potentially exposing uninitialized memory. Red Hat products utilizing this library may be affected if their implementations allow for such a crafted `close()` call.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"known_not_affected": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45736"
},
{
"category": "external",
"summary": "RHBZ#2477914",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477914"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45736",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45736"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45736",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45736"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/c0327ec15a54d701eb6ccefaa8bef328cfc03086",
"url": "https://github.com/websockets/ws/commit/c0327ec15a54d701eb6ccefaa8bef328cfc03086"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/security/advisories/GHSA-58qx-3vcg-4xpx",
"url": "https://github.com/websockets/ws/security/advisories/GHSA-58qx-3vcg-4xpx"
}
],
"release_date": "2026-05-15T14:53:57.263000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-24T16:29:56+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29197"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray`"
},
{
"cve": "CVE-2026-48779",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-16T22:01:24.571224+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2489661"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that consume excessive memory. Consequently, this leads to process termination and a denial of service (DoS) for the remote peer.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `ws` WebSocket library. A remote attacker can exploit this flaw by sending a high volume of small, fragmented data, leading to excessive memory consumption and subsequent process termination. This can result in service disruption for Red Hat products that utilize `ws` for WebSocket communication.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"known_not_affected": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48779"
},
{
"category": "external",
"summary": "RHBZ#2489661",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489661"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48779",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48779"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48779",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48779"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7",
"url": "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53",
"url": "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94",
"url": "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8",
"url": "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p",
"url": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p"
}
],
"release_date": "2026-06-16T21:26:22.537000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-24T16:29:56+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:29197"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments"
}
]
}
RHSA-2026:33155
Vulnerability from csaf_redhat - Published: 2026-06-29 16:07 - Updated: 2026-08-10 09:21Summary
Red Hat Security Advisory: Kiali 1.73.33 for Red Hat OpenShift Service Mesh 2.6
Severity
Important
Notes
Topic: Kiali 1.73.33 for Red Hat OpenShift Service Mesh 2.6 is now available.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Kiali 1.73.33, for Red Hat OpenShift Service Mesh 2.6, provides observability for the service mesh by offering a visual representation of the mesh topology and metrics, helping users monitor, trace, and manage efficiently.
Security Fix(es):
* CVE-2026-42338 openshift-service-mesh/kiali-ossmc-rhel9: ip-address: Cross-site scripting via improper HTML escaping of untrusted input (OSSM-14066)
* CVE-2026-42338 openshift-service-mesh/kiali-rhel9: ip-address: Cross-site scripting via improper HTML escaping of untrusted input (OSSM-14067)
* CVE-2026-39821 openshift-service-mesh/kiali-rhel9: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (OSSM-14073)
* CVE-2026-44495 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Information disclosure due to prototype pollution vulnerability (OSSM-14141)
* CVE-2026-44495 openshift-service-mesh/kiali-rhel9: Axios: Information disclosure due to prototype pollution vulnerability (OSSM-14142)
* CVE-2026-44488 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Denial of Service due to unenforced request and response size limits (OSSM-14152)
* CVE-2026-44488 openshift-service-mesh/kiali-rhel9: Axios: Denial of Service due to unenforced request and response size limits (OSSM-14156)
* CVE-2026-44487 openshift-service-mesh/kiali-rhel9: Axios: Information disclosure of proxy credentials via redirect flows (OSSM-14168)
* CVE-2026-44487 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Information disclosure of proxy credentials via redirect flows (OSSM-14182)
* CVE-2026-44494 openshift-service-mesh/kiali-rhel9: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution (OSSM-14177)
* CVE-2026-44494 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution (OSSM-14186)
* CVE-2026-44496 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name (OSSM-14210)
* CVE-2026-44496 openshift-service-mesh/kiali-rhel9: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name (OSSM-14206)
* CVE-2026-44486 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Information disclosure of proxy credentials via HTTP redirects (OSSM-14201)
* CVE-2026-44486 openshift-service-mesh/kiali-rhel9: Axios: Information disclosure of proxy credentials via HTTP redirects (OSSM-14187)
* CVE-2026-44492 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization (OSSM-14219)
* CVE-2026-44492 openshift-service-mesh/kiali-rhel9: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization (OSSM-14224)
* CVE-2026-48779 openshift-service-mesh/kiali-rhel9: ws: Denial of Service via memory exhaustion from small WebSocket fragments (OSSM-14305)
* CVE-2026-48779 openshift-service-mesh/kiali-ossmc-rhel9: ws: Denial of Service via memory exhaustion from small WebSocket fragments (OSSM-14303)
* CVE-2026-12143 openshift-service-mesh/kiali-ossmc-rhel9: form-data: Form field override via CRLF injection (OSSM-14335)
* CVE-2026-12143 openshift-service-mesh/kiali-rhel9: form-data: Form field override via CRLF injection (OSSM-14327)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:431be7a67581ddb521dc3e8a2d7fb59fdc2bfe8362e364aed4cdc8bb441495c0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:71bf14b0c1b05f821567971253f304ccc8a58cc682aa9dfe2805dc096f29ce39_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:75a4205abf3e9d948907598c52e18b89d5656e3bab72846319ca9d7162c9b123_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:f71032abc7a0d0885b56bf99a59c0b8800844297c0ff96fb2561edc493a0a0a2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:70f6b5471f8994330a6659bc2b863bff2792552231237d217825d432c166dfd9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:cf60d7a68c8b997e899f71a049e0d43d6d07115ed544a79db569bc8c33306e75_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ed47a2c0145d0e71f6c7dca89f1cb502098ab54c679367b2c7374fd6ca2da413_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:eff6e4643347f77c419cb3e32b4c9d914762b9f2114e832126964850b7179967_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:70f6b5471f8994330a6659bc2b863bff2792552231237d217825d432c166dfd9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:cf60d7a68c8b997e899f71a049e0d43d6d07115ed544a79db569bc8c33306e75_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ed47a2c0145d0e71f6c7dca89f1cb502098ab54c679367b2c7374fd6ca2da413_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:eff6e4643347f77c419cb3e32b4c9d914762b9f2114e832126964850b7179967_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:431be7a67581ddb521dc3e8a2d7fb59fdc2bfe8362e364aed4cdc8bb441495c0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:71bf14b0c1b05f821567971253f304ccc8a58cc682aa9dfe2805dc096f29ce39_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:75a4205abf3e9d948907598c52e18b89d5656e3bab72846319ca9d7162c9b123_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:f71032abc7a0d0885b56bf99a59c0b8800844297c0ff96fb2561edc493a0a0a2_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in ip-address, a JavaScript library for parsing and manipulating IPv4 and IPv6 addresses. This vulnerability allows a remote attacker to perform cross-site scripting (XSS) by providing untrusted input to the Address6 constructor. When an application renders the output of Address6.group(), Address6.link(), or the AddressError.parseMessage as HTML without proper escaping, the attacker-controlled content can be executed in the user's browser.
8.1 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:431be7a67581ddb521dc3e8a2d7fb59fdc2bfe8362e364aed4cdc8bb441495c0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:71bf14b0c1b05f821567971253f304ccc8a58cc682aa9dfe2805dc096f29ce39_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:75a4205abf3e9d948907598c52e18b89d5656e3bab72846319ca9d7162c9b123_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:f71032abc7a0d0885b56bf99a59c0b8800844297c0ff96fb2561edc493a0a0a2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:70f6b5471f8994330a6659bc2b863bff2792552231237d217825d432c166dfd9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:cf60d7a68c8b997e899f71a049e0d43d6d07115ed544a79db569bc8c33306e75_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ed47a2c0145d0e71f6c7dca89f1cb502098ab54c679367b2c7374fd6ca2da413_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:eff6e4643347f77c419cb3e32b4c9d914762b9f2114e832126964850b7179967_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:431be7a67581ddb521dc3e8a2d7fb59fdc2bfe8362e364aed4cdc8bb441495c0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:71bf14b0c1b05f821567971253f304ccc8a58cc682aa9dfe2805dc096f29ce39_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:75a4205abf3e9d948907598c52e18b89d5656e3bab72846319ca9d7162c9b123_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:f71032abc7a0d0885b56bf99a59c0b8800844297c0ff96fb2561edc493a0a0a2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:70f6b5471f8994330a6659bc2b863bff2792552231237d217825d432c166dfd9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:cf60d7a68c8b997e899f71a049e0d43d6d07115ed544a79db569bc8c33306e75_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ed47a2c0145d0e71f6c7dca89f1cb502098ab54c679367b2c7374fd6ca2da413_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:eff6e4643347f77c419cb3e32b4c9d914762b9f2114e832126964850b7179967_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:431be7a67581ddb521dc3e8a2d7fb59fdc2bfe8362e364aed4cdc8bb441495c0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:71bf14b0c1b05f821567971253f304ccc8a58cc682aa9dfe2805dc096f29ce39_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:75a4205abf3e9d948907598c52e18b89d5656e3bab72846319ca9d7162c9b123_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:f71032abc7a0d0885b56bf99a59c0b8800844297c0ff96fb2561edc493a0a0a2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:70f6b5471f8994330a6659bc2b863bff2792552231237d217825d432c166dfd9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:cf60d7a68c8b997e899f71a049e0d43d6d07115ed544a79db569bc8c33306e75_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ed47a2c0145d0e71f6c7dca89f1cb502098ab54c679367b2c7374fd6ca2da413_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:eff6e4643347f77c419cb3e32b4c9d914762b9f2114e832126964850b7179967_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:431be7a67581ddb521dc3e8a2d7fb59fdc2bfe8362e364aed4cdc8bb441495c0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:71bf14b0c1b05f821567971253f304ccc8a58cc682aa9dfe2805dc096f29ce39_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:75a4205abf3e9d948907598c52e18b89d5656e3bab72846319ca9d7162c9b123_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:f71032abc7a0d0885b56bf99a59c0b8800844297c0ff96fb2561edc493a0a0a2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:70f6b5471f8994330a6659bc2b863bff2792552231237d217825d432c166dfd9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:cf60d7a68c8b997e899f71a049e0d43d6d07115ed544a79db569bc8c33306e75_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ed47a2c0145d0e71f6c7dca89f1cb502098ab54c679367b2c7374fd6ca2da413_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:eff6e4643347f77c419cb3e32b4c9d914762b9f2114e832126964850b7179967_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.
8.6 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:431be7a67581ddb521dc3e8a2d7fb59fdc2bfe8362e364aed4cdc8bb441495c0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:71bf14b0c1b05f821567971253f304ccc8a58cc682aa9dfe2805dc096f29ce39_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:75a4205abf3e9d948907598c52e18b89d5656e3bab72846319ca9d7162c9b123_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:f71032abc7a0d0885b56bf99a59c0b8800844297c0ff96fb2561edc493a0a0a2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:70f6b5471f8994330a6659bc2b863bff2792552231237d217825d432c166dfd9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:cf60d7a68c8b997e899f71a049e0d43d6d07115ed544a79db569bc8c33306e75_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ed47a2c0145d0e71f6c7dca89f1cb502098ab54c679367b2c7374fd6ca2da413_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:eff6e4643347f77c419cb3e32b4c9d914762b9f2114e832126964850b7179967_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. This vulnerability, a Prototype Pollution "Gadget" attack, allows an attacker to escalate any existing Object.prototype pollution in an application's dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.
8.7 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:431be7a67581ddb521dc3e8a2d7fb59fdc2bfe8362e364aed4cdc8bb441495c0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:71bf14b0c1b05f821567971253f304ccc8a58cc682aa9dfe2805dc096f29ce39_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:75a4205abf3e9d948907598c52e18b89d5656e3bab72846319ca9d7162c9b123_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:f71032abc7a0d0885b56bf99a59c0b8800844297c0ff96fb2561edc493a0a0a2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:70f6b5471f8994330a6659bc2b863bff2792552231237d217825d432c166dfd9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:cf60d7a68c8b997e899f71a049e0d43d6d07115ed544a79db569bc8c33306e75_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ed47a2c0145d0e71f6c7dca89f1cb502098ab54c679367b2c7374fd6ca2da413_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:eff6e4643347f77c419cb3e32b4c9d914762b9f2114e832126964850b7179967_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.
7.0 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:431be7a67581ddb521dc3e8a2d7fb59fdc2bfe8362e364aed4cdc8bb441495c0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:71bf14b0c1b05f821567971253f304ccc8a58cc682aa9dfe2805dc096f29ce39_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:75a4205abf3e9d948907598c52e18b89d5656e3bab72846319ca9d7162c9b123_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:f71032abc7a0d0885b56bf99a59c0b8800844297c0ff96fb2561edc493a0a0a2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:70f6b5471f8994330a6659bc2b863bff2792552231237d217825d432c166dfd9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:cf60d7a68c8b997e899f71a049e0d43d6d07115ed544a79db569bc8c33306e75_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ed47a2c0145d0e71f6c7dca89f1cb502098ab54c679367b2c7374fd6ca2da413_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:eff6e4643347f77c419cb3e32b4c9d914762b9f2114e832126964850b7179967_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:431be7a67581ddb521dc3e8a2d7fb59fdc2bfe8362e364aed4cdc8bb441495c0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:71bf14b0c1b05f821567971253f304ccc8a58cc682aa9dfe2805dc096f29ce39_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:75a4205abf3e9d948907598c52e18b89d5656e3bab72846319ca9d7162c9b123_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:f71032abc7a0d0885b56bf99a59c0b8800844297c0ff96fb2561edc493a0a0a2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:70f6b5471f8994330a6659bc2b863bff2792552231237d217825d432c166dfd9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:cf60d7a68c8b997e899f71a049e0d43d6d07115ed544a79db569bc8c33306e75_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ed47a2c0145d0e71f6c7dca89f1cb502098ab54c679367b2c7374fd6ca2da413_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:eff6e4643347f77c419cb3e32b4c9d914762b9f2114e832126964850b7179967_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that consume excessive memory. Consequently, this leads to process termination and a denial of service (DoS) for the remote peer.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:431be7a67581ddb521dc3e8a2d7fb59fdc2bfe8362e364aed4cdc8bb441495c0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:71bf14b0c1b05f821567971253f304ccc8a58cc682aa9dfe2805dc096f29ce39_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:75a4205abf3e9d948907598c52e18b89d5656e3bab72846319ca9d7162c9b123_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:f71032abc7a0d0885b56bf99a59c0b8800844297c0ff96fb2561edc493a0a0a2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:70f6b5471f8994330a6659bc2b863bff2792552231237d217825d432c166dfd9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:cf60d7a68c8b997e899f71a049e0d43d6d07115ed544a79db569bc8c33306e75_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ed47a2c0145d0e71f6c7dca89f1cb502098ab54c679367b2c7374fd6ca2da413_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:eff6e4643347f77c419cb3e32b4c9d914762b9f2114e832126964850b7179967_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
83 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Kiali 1.73.33 for Red Hat OpenShift Service Mesh 2.6 is now available.\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Kiali 1.73.33, for Red Hat OpenShift Service Mesh 2.6, provides observability for the service mesh by offering a visual representation of the mesh topology and metrics, helping users monitor, trace, and manage efficiently.\n\nSecurity Fix(es):\n\n* CVE-2026-42338 openshift-service-mesh/kiali-ossmc-rhel9: ip-address: Cross-site scripting via improper HTML escaping of untrusted input (OSSM-14066)\n* CVE-2026-42338 openshift-service-mesh/kiali-rhel9: ip-address: Cross-site scripting via improper HTML escaping of untrusted input (OSSM-14067)\n* CVE-2026-39821 openshift-service-mesh/kiali-rhel9: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (OSSM-14073)\n* CVE-2026-44495 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Information disclosure due to prototype pollution vulnerability (OSSM-14141)\n* CVE-2026-44495 openshift-service-mesh/kiali-rhel9: Axios: Information disclosure due to prototype pollution vulnerability (OSSM-14142)\n* CVE-2026-44488 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Denial of Service due to unenforced request and response size limits (OSSM-14152)\n* CVE-2026-44488 openshift-service-mesh/kiali-rhel9: Axios: Denial of Service due to unenforced request and response size limits (OSSM-14156)\n* CVE-2026-44487 openshift-service-mesh/kiali-rhel9: Axios: Information disclosure of proxy credentials via redirect flows (OSSM-14168)\n* CVE-2026-44487 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Information disclosure of proxy credentials via redirect flows (OSSM-14182)\n* CVE-2026-44494 openshift-service-mesh/kiali-rhel9: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution (OSSM-14177)\n* CVE-2026-44494 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution (OSSM-14186)\n* CVE-2026-44496 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name (OSSM-14210)\n* CVE-2026-44496 openshift-service-mesh/kiali-rhel9: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name (OSSM-14206)\n* CVE-2026-44486 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Information disclosure of proxy credentials via HTTP redirects (OSSM-14201)\n* CVE-2026-44486 openshift-service-mesh/kiali-rhel9: Axios: Information disclosure of proxy credentials via HTTP redirects (OSSM-14187)\n* CVE-2026-44492 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization (OSSM-14219)\n* CVE-2026-44492 openshift-service-mesh/kiali-rhel9: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization (OSSM-14224)\n* CVE-2026-48779 openshift-service-mesh/kiali-rhel9: ws: Denial of Service via memory exhaustion from small WebSocket fragments (OSSM-14305)\n* CVE-2026-48779 openshift-service-mesh/kiali-ossmc-rhel9: ws: Denial of Service via memory exhaustion from small WebSocket fragments (OSSM-14303)\n* CVE-2026-12143 openshift-service-mesh/kiali-ossmc-rhel9: form-data: Form field override via CRLF injection (OSSM-14335)\n* CVE-2026-12143 openshift-service-mesh/kiali-rhel9: form-data: Form field override via CRLF injection (OSSM-14327)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:33155",
"url": "https://access.redhat.com/errata/RHSA-2026:33155"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-12143",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42338",
"url": "https://access.redhat.com/security/cve/CVE-2026-42338"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44486",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44487",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44488",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44492",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44494",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44495",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44496",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-48779",
"url": "https://access.redhat.com/security/cve/CVE-2026-48779"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification",
"url": "https://access.redhat.com/security/updates/classification"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_33155.json"
}
],
"title": "Red Hat Security Advisory: Kiali 1.73.33 for Red Hat OpenShift Service Mesh 2.6",
"tracking": {
"current_release_date": "2026-08-10T09:21:09+00:00",
"generator": {
"date": "2026-08-10T09:21:09+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.12"
}
},
"id": "RHSA-2026:33155",
"initial_release_date": "2026-06-29T16:07:52+00:00",
"revision_history": [
{
"date": "2026-06-29T16:07:52+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-08T04:36:23+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-10T09:21:09+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Service Mesh 2.6",
"product": {
"name": "Red Hat OpenShift Service Mesh 2.6",
"product_id": "Red Hat OpenShift Service Mesh 2.6",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:service_mesh:2.6::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Service Mesh"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:eff6e4643347f77c419cb3e32b4c9d914762b9f2114e832126964850b7179967_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:eff6e4643347f77c419cb3e32b4c9d914762b9f2114e832126964850b7179967_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:eff6e4643347f77c419cb3e32b4c9d914762b9f2114e832126964850b7179967_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel8@sha256%3Aeff6e4643347f77c419cb3e32b4c9d914762b9f2114e832126964850b7179967?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-rhel8\u0026tag=1782287580"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:431be7a67581ddb521dc3e8a2d7fb59fdc2bfe8362e364aed4cdc8bb441495c0_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:431be7a67581ddb521dc3e8a2d7fb59fdc2bfe8362e364aed4cdc8bb441495c0_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:431be7a67581ddb521dc3e8a2d7fb59fdc2bfe8362e364aed4cdc8bb441495c0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel8@sha256%3A431be7a67581ddb521dc3e8a2d7fb59fdc2bfe8362e364aed4cdc8bb441495c0?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8\u0026tag=1781937133"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:70f6b5471f8994330a6659bc2b863bff2792552231237d217825d432c166dfd9_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:70f6b5471f8994330a6659bc2b863bff2792552231237d217825d432c166dfd9_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:70f6b5471f8994330a6659bc2b863bff2792552231237d217825d432c166dfd9_arm64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel8@sha256%3A70f6b5471f8994330a6659bc2b863bff2792552231237d217825d432c166dfd9?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-rhel8\u0026tag=1782287580"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:f71032abc7a0d0885b56bf99a59c0b8800844297c0ff96fb2561edc493a0a0a2_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:f71032abc7a0d0885b56bf99a59c0b8800844297c0ff96fb2561edc493a0a0a2_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:f71032abc7a0d0885b56bf99a59c0b8800844297c0ff96fb2561edc493a0a0a2_arm64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel8@sha256%3Af71032abc7a0d0885b56bf99a59c0b8800844297c0ff96fb2561edc493a0a0a2?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8\u0026tag=1781937133"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:cf60d7a68c8b997e899f71a049e0d43d6d07115ed544a79db569bc8c33306e75_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:cf60d7a68c8b997e899f71a049e0d43d6d07115ed544a79db569bc8c33306e75_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:cf60d7a68c8b997e899f71a049e0d43d6d07115ed544a79db569bc8c33306e75_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel8@sha256%3Acf60d7a68c8b997e899f71a049e0d43d6d07115ed544a79db569bc8c33306e75?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-rhel8\u0026tag=1782287580"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:75a4205abf3e9d948907598c52e18b89d5656e3bab72846319ca9d7162c9b123_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:75a4205abf3e9d948907598c52e18b89d5656e3bab72846319ca9d7162c9b123_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:75a4205abf3e9d948907598c52e18b89d5656e3bab72846319ca9d7162c9b123_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel8@sha256%3A75a4205abf3e9d948907598c52e18b89d5656e3bab72846319ca9d7162c9b123?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8\u0026tag=1781937133"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ed47a2c0145d0e71f6c7dca89f1cb502098ab54c679367b2c7374fd6ca2da413_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ed47a2c0145d0e71f6c7dca89f1cb502098ab54c679367b2c7374fd6ca2da413_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ed47a2c0145d0e71f6c7dca89f1cb502098ab54c679367b2c7374fd6ca2da413_s390x",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel8@sha256%3Aed47a2c0145d0e71f6c7dca89f1cb502098ab54c679367b2c7374fd6ca2da413?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-rhel8\u0026tag=1782287580"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:71bf14b0c1b05f821567971253f304ccc8a58cc682aa9dfe2805dc096f29ce39_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:71bf14b0c1b05f821567971253f304ccc8a58cc682aa9dfe2805dc096f29ce39_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:71bf14b0c1b05f821567971253f304ccc8a58cc682aa9dfe2805dc096f29ce39_s390x",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel8@sha256%3A71bf14b0c1b05f821567971253f304ccc8a58cc682aa9dfe2805dc096f29ce39?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8\u0026tag=1781937133"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:431be7a67581ddb521dc3e8a2d7fb59fdc2bfe8362e364aed4cdc8bb441495c0_amd64 as a component of Red Hat OpenShift Service Mesh 2.6",
"product_id": "Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:431be7a67581ddb521dc3e8a2d7fb59fdc2bfe8362e364aed4cdc8bb441495c0_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:431be7a67581ddb521dc3e8a2d7fb59fdc2bfe8362e364aed4cdc8bb441495c0_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:71bf14b0c1b05f821567971253f304ccc8a58cc682aa9dfe2805dc096f29ce39_s390x as a component of Red Hat OpenShift Service Mesh 2.6",
"product_id": "Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:71bf14b0c1b05f821567971253f304ccc8a58cc682aa9dfe2805dc096f29ce39_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:71bf14b0c1b05f821567971253f304ccc8a58cc682aa9dfe2805dc096f29ce39_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:75a4205abf3e9d948907598c52e18b89d5656e3bab72846319ca9d7162c9b123_ppc64le as a component of Red Hat OpenShift Service Mesh 2.6",
"product_id": "Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:75a4205abf3e9d948907598c52e18b89d5656e3bab72846319ca9d7162c9b123_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:75a4205abf3e9d948907598c52e18b89d5656e3bab72846319ca9d7162c9b123_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:f71032abc7a0d0885b56bf99a59c0b8800844297c0ff96fb2561edc493a0a0a2_arm64 as a component of Red Hat OpenShift Service Mesh 2.6",
"product_id": "Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:f71032abc7a0d0885b56bf99a59c0b8800844297c0ff96fb2561edc493a0a0a2_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:f71032abc7a0d0885b56bf99a59c0b8800844297c0ff96fb2561edc493a0a0a2_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:70f6b5471f8994330a6659bc2b863bff2792552231237d217825d432c166dfd9_arm64 as a component of Red Hat OpenShift Service Mesh 2.6",
"product_id": "Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:70f6b5471f8994330a6659bc2b863bff2792552231237d217825d432c166dfd9_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:70f6b5471f8994330a6659bc2b863bff2792552231237d217825d432c166dfd9_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:cf60d7a68c8b997e899f71a049e0d43d6d07115ed544a79db569bc8c33306e75_ppc64le as a component of Red Hat OpenShift Service Mesh 2.6",
"product_id": "Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:cf60d7a68c8b997e899f71a049e0d43d6d07115ed544a79db569bc8c33306e75_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:cf60d7a68c8b997e899f71a049e0d43d6d07115ed544a79db569bc8c33306e75_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ed47a2c0145d0e71f6c7dca89f1cb502098ab54c679367b2c7374fd6ca2da413_s390x as a component of Red Hat OpenShift Service Mesh 2.6",
"product_id": "Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ed47a2c0145d0e71f6c7dca89f1cb502098ab54c679367b2c7374fd6ca2da413_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ed47a2c0145d0e71f6c7dca89f1cb502098ab54c679367b2c7374fd6ca2da413_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:eff6e4643347f77c419cb3e32b4c9d914762b9f2114e832126964850b7179967_amd64 as a component of Red Hat OpenShift Service Mesh 2.6",
"product_id": "Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:eff6e4643347f77c419cb3e32b4c9d914762b9f2114e832126964850b7179967_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:eff6e4643347f77c419cb3e32b4c9d914762b9f2114e832126964850b7179967_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 2.6"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-12143",
"cwe": {
"id": "CWE-93",
"name": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
},
"discovery_date": "2026-06-12T19:00:57.360953+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488480"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (\") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "form-data: form-data: Form field override via CRLF injection",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important impact flaw in the form-data library: a remote attacker can inject arbitrary headers or additional multipart parts via CRLF injection in field names or filenames, potentially overriding sensitive form fields and affecting data integrity.\n\nFor RHOAI and RHEL AI, severity is Moderate because affected versions appear only as a transitive npm dependency in RHOAI (dashboard, mod-arch plugins, MLflow UI) and RHEL AI 3.4 bootc images, and those products use fixed field names for uploads rather than passing untrusted user input as multipart field names or filenames. The documented exploit path is therefore not reachable in default deployments. Practical impact is limited to non-default or custom integrations that forward multipart requests using attacker-controlled field names.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:431be7a67581ddb521dc3e8a2d7fb59fdc2bfe8362e364aed4cdc8bb441495c0_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:71bf14b0c1b05f821567971253f304ccc8a58cc682aa9dfe2805dc096f29ce39_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:75a4205abf3e9d948907598c52e18b89d5656e3bab72846319ca9d7162c9b123_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:f71032abc7a0d0885b56bf99a59c0b8800844297c0ff96fb2561edc493a0a0a2_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:70f6b5471f8994330a6659bc2b863bff2792552231237d217825d432c166dfd9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:cf60d7a68c8b997e899f71a049e0d43d6d07115ed544a79db569bc8c33306e75_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ed47a2c0145d0e71f6c7dca89f1cb502098ab54c679367b2c7374fd6ca2da413_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:eff6e4643347f77c419cb3e32b4c9d914762b9f2114e832126964850b7179967_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "RHBZ#2488480",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488480"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12143",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12143"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://cwe.mitre.org/data/definitions/93.html",
"url": "https://cwe.mitre.org/data/definitions/93.html"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435",
"url": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229",
"url": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045",
"url": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx",
"url": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx"
},
{
"category": "external",
"summary": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data",
"url": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/form-data",
"url": "https://www.npmjs.com/package/form-data"
}
],
"release_date": "2026-06-12T18:01:30.362000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T16:07:52+00:00",
"details": "See Kiali 1.73.33 documentation at https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/service_mesh/service-mesh-2-x",
"product_ids": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:431be7a67581ddb521dc3e8a2d7fb59fdc2bfe8362e364aed4cdc8bb441495c0_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:71bf14b0c1b05f821567971253f304ccc8a58cc682aa9dfe2805dc096f29ce39_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:75a4205abf3e9d948907598c52e18b89d5656e3bab72846319ca9d7162c9b123_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:f71032abc7a0d0885b56bf99a59c0b8800844297c0ff96fb2561edc493a0a0a2_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:70f6b5471f8994330a6659bc2b863bff2792552231237d217825d432c166dfd9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:cf60d7a68c8b997e899f71a049e0d43d6d07115ed544a79db569bc8c33306e75_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ed47a2c0145d0e71f6c7dca89f1cb502098ab54c679367b2c7374fd6ca2da413_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:eff6e4643347f77c419cb3e32b4c9d914762b9f2114e832126964850b7179967_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33155"
},
{
"category": "workaround",
"details": "Applications using the `form-data` library should implement strict input validation and sanitization for all field names and filenames derived from untrusted sources. This prevents the injection of control characters (CR, LF, \") that could lead to header injection or form field overrides. Deployments that exclusively use fixed or trusted field names are not impacted.",
"product_ids": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:431be7a67581ddb521dc3e8a2d7fb59fdc2bfe8362e364aed4cdc8bb441495c0_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:71bf14b0c1b05f821567971253f304ccc8a58cc682aa9dfe2805dc096f29ce39_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:75a4205abf3e9d948907598c52e18b89d5656e3bab72846319ca9d7162c9b123_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:f71032abc7a0d0885b56bf99a59c0b8800844297c0ff96fb2561edc493a0a0a2_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:70f6b5471f8994330a6659bc2b863bff2792552231237d217825d432c166dfd9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:cf60d7a68c8b997e899f71a049e0d43d6d07115ed544a79db569bc8c33306e75_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ed47a2c0145d0e71f6c7dca89f1cb502098ab54c679367b2c7374fd6ca2da413_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:eff6e4643347f77c419cb3e32b4c9d914762b9f2114e832126964850b7179967_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:431be7a67581ddb521dc3e8a2d7fb59fdc2bfe8362e364aed4cdc8bb441495c0_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:71bf14b0c1b05f821567971253f304ccc8a58cc682aa9dfe2805dc096f29ce39_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:75a4205abf3e9d948907598c52e18b89d5656e3bab72846319ca9d7162c9b123_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:f71032abc7a0d0885b56bf99a59c0b8800844297c0ff96fb2561edc493a0a0a2_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:70f6b5471f8994330a6659bc2b863bff2792552231237d217825d432c166dfd9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:cf60d7a68c8b997e899f71a049e0d43d6d07115ed544a79db569bc8c33306e75_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ed47a2c0145d0e71f6c7dca89f1cb502098ab54c679367b2c7374fd6ca2da413_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:eff6e4643347f77c419cb3e32b4c9d914762b9f2114e832126964850b7179967_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "form-data: form-data: Form field override via CRLF injection"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:431be7a67581ddb521dc3e8a2d7fb59fdc2bfe8362e364aed4cdc8bb441495c0_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:71bf14b0c1b05f821567971253f304ccc8a58cc682aa9dfe2805dc096f29ce39_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:75a4205abf3e9d948907598c52e18b89d5656e3bab72846319ca9d7162c9b123_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:f71032abc7a0d0885b56bf99a59c0b8800844297c0ff96fb2561edc493a0a0a2_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:70f6b5471f8994330a6659bc2b863bff2792552231237d217825d432c166dfd9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:cf60d7a68c8b997e899f71a049e0d43d6d07115ed544a79db569bc8c33306e75_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ed47a2c0145d0e71f6c7dca89f1cb502098ab54c679367b2c7374fd6ca2da413_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:eff6e4643347f77c419cb3e32b4c9d914762b9f2114e832126964850b7179967_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:431be7a67581ddb521dc3e8a2d7fb59fdc2bfe8362e364aed4cdc8bb441495c0_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:71bf14b0c1b05f821567971253f304ccc8a58cc682aa9dfe2805dc096f29ce39_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:75a4205abf3e9d948907598c52e18b89d5656e3bab72846319ca9d7162c9b123_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:f71032abc7a0d0885b56bf99a59c0b8800844297c0ff96fb2561edc493a0a0a2_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T16:07:52+00:00",
"details": "See Kiali 1.73.33 documentation at https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/service_mesh/service-mesh-2-x",
"product_ids": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:70f6b5471f8994330a6659bc2b863bff2792552231237d217825d432c166dfd9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:cf60d7a68c8b997e899f71a049e0d43d6d07115ed544a79db569bc8c33306e75_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ed47a2c0145d0e71f6c7dca89f1cb502098ab54c679367b2c7374fd6ca2da413_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:eff6e4643347f77c419cb3e32b4c9d914762b9f2114e832126964850b7179967_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33155"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:431be7a67581ddb521dc3e8a2d7fb59fdc2bfe8362e364aed4cdc8bb441495c0_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:71bf14b0c1b05f821567971253f304ccc8a58cc682aa9dfe2805dc096f29ce39_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:75a4205abf3e9d948907598c52e18b89d5656e3bab72846319ca9d7162c9b123_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:f71032abc7a0d0885b56bf99a59c0b8800844297c0ff96fb2561edc493a0a0a2_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:70f6b5471f8994330a6659bc2b863bff2792552231237d217825d432c166dfd9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:cf60d7a68c8b997e899f71a049e0d43d6d07115ed544a79db569bc8c33306e75_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ed47a2c0145d0e71f6c7dca89f1cb502098ab54c679367b2c7374fd6ca2da413_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:eff6e4643347f77c419cb3e32b4c9d914762b9f2114e832126964850b7179967_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:431be7a67581ddb521dc3e8a2d7fb59fdc2bfe8362e364aed4cdc8bb441495c0_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:71bf14b0c1b05f821567971253f304ccc8a58cc682aa9dfe2805dc096f29ce39_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:75a4205abf3e9d948907598c52e18b89d5656e3bab72846319ca9d7162c9b123_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:f71032abc7a0d0885b56bf99a59c0b8800844297c0ff96fb2561edc493a0a0a2_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:70f6b5471f8994330a6659bc2b863bff2792552231237d217825d432c166dfd9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:cf60d7a68c8b997e899f71a049e0d43d6d07115ed544a79db569bc8c33306e75_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ed47a2c0145d0e71f6c7dca89f1cb502098ab54c679367b2c7374fd6ca2da413_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:eff6e4643347f77c419cb3e32b4c9d914762b9f2114e832126964850b7179967_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-42338",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-12T21:01:14.436876+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2476810"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ip-address, a JavaScript library for parsing and manipulating IPv4 and IPv6 addresses. This vulnerability allows a remote attacker to perform cross-site scripting (XSS) by providing untrusted input to the Address6 constructor. When an application renders the output of Address6.group(), Address6.link(), or the AddressError.parseMessage as HTML without proper escaping, the attacker-controlled content can be executed in the user\u0027s browser.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in the `ip-address` JavaScript library is rated as Important. It allows for cross-site scripting (XSS) when an application processes untrusted input through the `Address6` constructor and subsequently renders the unescaped output of methods like `Address6.group()`, `Address6.link()`, or `AddressError.parseMessage` directly as HTML. While the library itself is affected, exploitation is contingent on specific application-level rendering practices that may not be common in Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:431be7a67581ddb521dc3e8a2d7fb59fdc2bfe8362e364aed4cdc8bb441495c0_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:71bf14b0c1b05f821567971253f304ccc8a58cc682aa9dfe2805dc096f29ce39_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:75a4205abf3e9d948907598c52e18b89d5656e3bab72846319ca9d7162c9b123_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:f71032abc7a0d0885b56bf99a59c0b8800844297c0ff96fb2561edc493a0a0a2_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:70f6b5471f8994330a6659bc2b863bff2792552231237d217825d432c166dfd9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:cf60d7a68c8b997e899f71a049e0d43d6d07115ed544a79db569bc8c33306e75_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ed47a2c0145d0e71f6c7dca89f1cb502098ab54c679367b2c7374fd6ca2da413_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:eff6e4643347f77c419cb3e32b4c9d914762b9f2114e832126964850b7179967_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42338"
},
{
"category": "external",
"summary": "RHBZ#2476810",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2476810"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42338",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42338"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42338",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42338"
},
{
"category": "external",
"summary": "https://github.com/beaugunderson/ip-address/security/advisories/GHSA-v2v4-37r5-5v8g",
"url": "https://github.com/beaugunderson/ip-address/security/advisories/GHSA-v2v4-37r5-5v8g"
}
],
"release_date": "2026-05-12T19:43:16.470000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T16:07:52+00:00",
"details": "See Kiali 1.73.33 documentation at https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/service_mesh/service-mesh-2-x",
"product_ids": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:431be7a67581ddb521dc3e8a2d7fb59fdc2bfe8362e364aed4cdc8bb441495c0_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:71bf14b0c1b05f821567971253f304ccc8a58cc682aa9dfe2805dc096f29ce39_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:75a4205abf3e9d948907598c52e18b89d5656e3bab72846319ca9d7162c9b123_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:f71032abc7a0d0885b56bf99a59c0b8800844297c0ff96fb2561edc493a0a0a2_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:70f6b5471f8994330a6659bc2b863bff2792552231237d217825d432c166dfd9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:cf60d7a68c8b997e899f71a049e0d43d6d07115ed544a79db569bc8c33306e75_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ed47a2c0145d0e71f6c7dca89f1cb502098ab54c679367b2c7374fd6ca2da413_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:eff6e4643347f77c419cb3e32b4c9d914762b9f2114e832126964850b7179967_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33155"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:431be7a67581ddb521dc3e8a2d7fb59fdc2bfe8362e364aed4cdc8bb441495c0_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:71bf14b0c1b05f821567971253f304ccc8a58cc682aa9dfe2805dc096f29ce39_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:75a4205abf3e9d948907598c52e18b89d5656e3bab72846319ca9d7162c9b123_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:f71032abc7a0d0885b56bf99a59c0b8800844297c0ff96fb2561edc493a0a0a2_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:70f6b5471f8994330a6659bc2b863bff2792552231237d217825d432c166dfd9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:cf60d7a68c8b997e899f71a049e0d43d6d07115ed544a79db569bc8c33306e75_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ed47a2c0145d0e71f6c7dca89f1cb502098ab54c679367b2c7374fd6ca2da413_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:eff6e4643347f77c419cb3e32b4c9d914762b9f2114e832126964850b7179967_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:431be7a67581ddb521dc3e8a2d7fb59fdc2bfe8362e364aed4cdc8bb441495c0_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:71bf14b0c1b05f821567971253f304ccc8a58cc682aa9dfe2805dc096f29ce39_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:75a4205abf3e9d948907598c52e18b89d5656e3bab72846319ca9d7162c9b123_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:f71032abc7a0d0885b56bf99a59c0b8800844297c0ff96fb2561edc493a0a0a2_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:70f6b5471f8994330a6659bc2b863bff2792552231237d217825d432c166dfd9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:cf60d7a68c8b997e899f71a049e0d43d6d07115ed544a79db569bc8c33306e75_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ed47a2c0145d0e71f6c7dca89f1cb502098ab54c679367b2c7374fd6ca2da413_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:eff6e4643347f77c419cb3e32b4c9d914762b9f2114e832126964850b7179967_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input"
},
{
"cve": "CVE-2026-44486",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:30.944384+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487947"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in the Axios Node.js HTTP adapter. Red Hat products utilizing Axios in a Node.js environment with an authenticated proxy and automatic redirects enabled are susceptible. The vulnerability arises when a request, initially sent through an authenticated proxy, is redirected to a target that no longer uses the proxy, potentially leaking `Proxy-Authorization` headers containing sensitive credentials to an untrusted remote server. This risk is heightened in deployments where applications interact with untrusted HTTP origins.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:431be7a67581ddb521dc3e8a2d7fb59fdc2bfe8362e364aed4cdc8bb441495c0_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:71bf14b0c1b05f821567971253f304ccc8a58cc682aa9dfe2805dc096f29ce39_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:75a4205abf3e9d948907598c52e18b89d5656e3bab72846319ca9d7162c9b123_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:f71032abc7a0d0885b56bf99a59c0b8800844297c0ff96fb2561edc493a0a0a2_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:70f6b5471f8994330a6659bc2b863bff2792552231237d217825d432c166dfd9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:cf60d7a68c8b997e899f71a049e0d43d6d07115ed544a79db569bc8c33306e75_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ed47a2c0145d0e71f6c7dca89f1cb502098ab54c679367b2c7374fd6ca2da413_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:eff6e4643347f77c419cb3e32b4c9d914762b9f2114e832126964850b7179967_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "RHBZ#2487947",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487947"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44486",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44486"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc",
"url": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc"
}
],
"release_date": "2026-06-11T15:39:07.714000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T16:07:52+00:00",
"details": "See Kiali 1.73.33 documentation at https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/service_mesh/service-mesh-2-x",
"product_ids": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:431be7a67581ddb521dc3e8a2d7fb59fdc2bfe8362e364aed4cdc8bb441495c0_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:71bf14b0c1b05f821567971253f304ccc8a58cc682aa9dfe2805dc096f29ce39_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:75a4205abf3e9d948907598c52e18b89d5656e3bab72846319ca9d7162c9b123_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:f71032abc7a0d0885b56bf99a59c0b8800844297c0ff96fb2561edc493a0a0a2_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:70f6b5471f8994330a6659bc2b863bff2792552231237d217825d432c166dfd9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:cf60d7a68c8b997e899f71a049e0d43d6d07115ed544a79db569bc8c33306e75_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ed47a2c0145d0e71f6c7dca89f1cb502098ab54c679367b2c7374fd6ca2da413_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:eff6e4643347f77c419cb3e32b4c9d914762b9f2114e832126964850b7179967_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33155"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:431be7a67581ddb521dc3e8a2d7fb59fdc2bfe8362e364aed4cdc8bb441495c0_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:71bf14b0c1b05f821567971253f304ccc8a58cc682aa9dfe2805dc096f29ce39_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:75a4205abf3e9d948907598c52e18b89d5656e3bab72846319ca9d7162c9b123_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:f71032abc7a0d0885b56bf99a59c0b8800844297c0ff96fb2561edc493a0a0a2_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:70f6b5471f8994330a6659bc2b863bff2792552231237d217825d432c166dfd9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:cf60d7a68c8b997e899f71a049e0d43d6d07115ed544a79db569bc8c33306e75_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ed47a2c0145d0e71f6c7dca89f1cb502098ab54c679367b2c7374fd6ca2da413_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:eff6e4643347f77c419cb3e32b4c9d914762b9f2114e832126964850b7179967_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:431be7a67581ddb521dc3e8a2d7fb59fdc2bfe8362e364aed4cdc8bb441495c0_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:71bf14b0c1b05f821567971253f304ccc8a58cc682aa9dfe2805dc096f29ce39_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:75a4205abf3e9d948907598c52e18b89d5656e3bab72846319ca9d7162c9b123_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:f71032abc7a0d0885b56bf99a59c0b8800844297c0ff96fb2561edc493a0a0a2_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:70f6b5471f8994330a6659bc2b863bff2792552231237d217825d432c166dfd9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:cf60d7a68c8b997e899f71a049e0d43d6d07115ed544a79db569bc8c33306e75_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ed47a2c0145d0e71f6c7dca89f1cb502098ab54c679367b2c7374fd6ca2da413_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:eff6e4643347f77c419cb3e32b4c9d914762b9f2114e832126964850b7179967_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects"
},
{
"cve": "CVE-2026-44487",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:34.091476+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487948"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via redirect flows",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in Axios affecting Node.js environments. When an application uses Axios with an authenticated HTTP proxy and follows redirects from an HTTP to a non-proxied HTTPS destination, the Proxy-Authorization header may be inadvertently sent to the final origin server. This could lead to the exposure of sensitive proxy credentials to an unintended third party.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:431be7a67581ddb521dc3e8a2d7fb59fdc2bfe8362e364aed4cdc8bb441495c0_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:71bf14b0c1b05f821567971253f304ccc8a58cc682aa9dfe2805dc096f29ce39_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:75a4205abf3e9d948907598c52e18b89d5656e3bab72846319ca9d7162c9b123_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:f71032abc7a0d0885b56bf99a59c0b8800844297c0ff96fb2561edc493a0a0a2_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:70f6b5471f8994330a6659bc2b863bff2792552231237d217825d432c166dfd9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:cf60d7a68c8b997e899f71a049e0d43d6d07115ed544a79db569bc8c33306e75_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ed47a2c0145d0e71f6c7dca89f1cb502098ab54c679367b2c7374fd6ca2da413_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:eff6e4643347f77c419cb3e32b4c9d914762b9f2114e832126964850b7179967_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "RHBZ#2487948",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487948"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44487",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44487"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v",
"url": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v"
}
],
"release_date": "2026-06-11T15:38:25.150000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T16:07:52+00:00",
"details": "See Kiali 1.73.33 documentation at https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/service_mesh/service-mesh-2-x",
"product_ids": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:431be7a67581ddb521dc3e8a2d7fb59fdc2bfe8362e364aed4cdc8bb441495c0_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:71bf14b0c1b05f821567971253f304ccc8a58cc682aa9dfe2805dc096f29ce39_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:75a4205abf3e9d948907598c52e18b89d5656e3bab72846319ca9d7162c9b123_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:f71032abc7a0d0885b56bf99a59c0b8800844297c0ff96fb2561edc493a0a0a2_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:70f6b5471f8994330a6659bc2b863bff2792552231237d217825d432c166dfd9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:cf60d7a68c8b997e899f71a049e0d43d6d07115ed544a79db569bc8c33306e75_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ed47a2c0145d0e71f6c7dca89f1cb502098ab54c679367b2c7374fd6ca2da413_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:eff6e4643347f77c419cb3e32b4c9d914762b9f2114e832126964850b7179967_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33155"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:431be7a67581ddb521dc3e8a2d7fb59fdc2bfe8362e364aed4cdc8bb441495c0_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:71bf14b0c1b05f821567971253f304ccc8a58cc682aa9dfe2805dc096f29ce39_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:75a4205abf3e9d948907598c52e18b89d5656e3bab72846319ca9d7162c9b123_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:f71032abc7a0d0885b56bf99a59c0b8800844297c0ff96fb2561edc493a0a0a2_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:70f6b5471f8994330a6659bc2b863bff2792552231237d217825d432c166dfd9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:cf60d7a68c8b997e899f71a049e0d43d6d07115ed544a79db569bc8c33306e75_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ed47a2c0145d0e71f6c7dca89f1cb502098ab54c679367b2c7374fd6ca2da413_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:eff6e4643347f77c419cb3e32b4c9d914762b9f2114e832126964850b7179967_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:431be7a67581ddb521dc3e8a2d7fb59fdc2bfe8362e364aed4cdc8bb441495c0_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:71bf14b0c1b05f821567971253f304ccc8a58cc682aa9dfe2805dc096f29ce39_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:75a4205abf3e9d948907598c52e18b89d5656e3bab72846319ca9d7162c9b123_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:f71032abc7a0d0885b56bf99a59c0b8800844297c0ff96fb2561edc493a0a0a2_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:70f6b5471f8994330a6659bc2b863bff2792552231237d217825d432c166dfd9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:cf60d7a68c8b997e899f71a049e0d43d6d07115ed544a79db569bc8c33306e75_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ed47a2c0145d0e71f6c7dca89f1cb502098ab54c679367b2c7374fd6ca2da413_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:eff6e4643347f77c419cb3e32b4c9d914762b9f2114e832126964850b7179967_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via redirect flows"
},
{
"cve": "CVE-2026-44488",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-11T17:01:36.836488+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487949"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Denial of Service due to unenforced request and response size limits",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A denial of service flaw was found in Axios, a JavaScript HTTP client library. This issue arises when applications utilize the `fetch` adapter, as configured request and response size limits are not properly enforced. A remote attacker could exploit this by sending or receiving excessively large data bodies, leading to resource exhaustion and potential denial of service in affected server-side applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:431be7a67581ddb521dc3e8a2d7fb59fdc2bfe8362e364aed4cdc8bb441495c0_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:71bf14b0c1b05f821567971253f304ccc8a58cc682aa9dfe2805dc096f29ce39_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:75a4205abf3e9d948907598c52e18b89d5656e3bab72846319ca9d7162c9b123_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:f71032abc7a0d0885b56bf99a59c0b8800844297c0ff96fb2561edc493a0a0a2_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:70f6b5471f8994330a6659bc2b863bff2792552231237d217825d432c166dfd9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:cf60d7a68c8b997e899f71a049e0d43d6d07115ed544a79db569bc8c33306e75_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ed47a2c0145d0e71f6c7dca89f1cb502098ab54c679367b2c7374fd6ca2da413_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:eff6e4643347f77c419cb3e32b4c9d914762b9f2114e832126964850b7179967_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "RHBZ#2487949",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487949"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf"
}
],
"release_date": "2026-06-11T15:37:38.013000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T16:07:52+00:00",
"details": "See Kiali 1.73.33 documentation at https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/service_mesh/service-mesh-2-x",
"product_ids": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:431be7a67581ddb521dc3e8a2d7fb59fdc2bfe8362e364aed4cdc8bb441495c0_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:71bf14b0c1b05f821567971253f304ccc8a58cc682aa9dfe2805dc096f29ce39_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:75a4205abf3e9d948907598c52e18b89d5656e3bab72846319ca9d7162c9b123_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:f71032abc7a0d0885b56bf99a59c0b8800844297c0ff96fb2561edc493a0a0a2_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:70f6b5471f8994330a6659bc2b863bff2792552231237d217825d432c166dfd9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:cf60d7a68c8b997e899f71a049e0d43d6d07115ed544a79db569bc8c33306e75_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ed47a2c0145d0e71f6c7dca89f1cb502098ab54c679367b2c7374fd6ca2da413_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:eff6e4643347f77c419cb3e32b4c9d914762b9f2114e832126964850b7179967_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33155"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:431be7a67581ddb521dc3e8a2d7fb59fdc2bfe8362e364aed4cdc8bb441495c0_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:71bf14b0c1b05f821567971253f304ccc8a58cc682aa9dfe2805dc096f29ce39_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:75a4205abf3e9d948907598c52e18b89d5656e3bab72846319ca9d7162c9b123_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:f71032abc7a0d0885b56bf99a59c0b8800844297c0ff96fb2561edc493a0a0a2_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:70f6b5471f8994330a6659bc2b863bff2792552231237d217825d432c166dfd9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:cf60d7a68c8b997e899f71a049e0d43d6d07115ed544a79db569bc8c33306e75_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ed47a2c0145d0e71f6c7dca89f1cb502098ab54c679367b2c7374fd6ca2da413_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:eff6e4643347f77c419cb3e32b4c9d914762b9f2114e832126964850b7179967_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:431be7a67581ddb521dc3e8a2d7fb59fdc2bfe8362e364aed4cdc8bb441495c0_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:71bf14b0c1b05f821567971253f304ccc8a58cc682aa9dfe2805dc096f29ce39_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:75a4205abf3e9d948907598c52e18b89d5656e3bab72846319ca9d7162c9b123_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:f71032abc7a0d0885b56bf99a59c0b8800844297c0ff96fb2561edc493a0a0a2_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:70f6b5471f8994330a6659bc2b863bff2792552231237d217825d432c166dfd9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:cf60d7a68c8b997e899f71a049e0d43d6d07115ed544a79db569bc8c33306e75_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ed47a2c0145d0e71f6c7dca89f1cb502098ab54c679367b2c7374fd6ca2da413_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:eff6e4643347f77c419cb3e32b4c9d914762b9f2114e832126964850b7179967_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Denial of Service due to unenforced request and response size limits"
},
{
"cve": "CVE-2026-44492",
"cwe": {
"id": "CWE-289",
"name": "Authentication Bypass by Alternate Name"
},
"discovery_date": "2026-06-11T17:00:56.761751+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487938"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Axios, a JavaScript HTTP client library, that allows for a proxy bypass. When a `NO_PROXY` environment variable is configured to prevent direct connections to specific IPv4 addresses, an attacker can craft a request URL using the IPv4-mapped IPv6 address format. This bypasses the intended `NO_PROXY` exclusion, routing the request through the configured proxy and potentially exposing internal services or sensitive information, such as cloud instance metadata credentials.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:431be7a67581ddb521dc3e8a2d7fb59fdc2bfe8362e364aed4cdc8bb441495c0_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:71bf14b0c1b05f821567971253f304ccc8a58cc682aa9dfe2805dc096f29ce39_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:75a4205abf3e9d948907598c52e18b89d5656e3bab72846319ca9d7162c9b123_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:f71032abc7a0d0885b56bf99a59c0b8800844297c0ff96fb2561edc493a0a0a2_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:70f6b5471f8994330a6659bc2b863bff2792552231237d217825d432c166dfd9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:cf60d7a68c8b997e899f71a049e0d43d6d07115ed544a79db569bc8c33306e75_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ed47a2c0145d0e71f6c7dca89f1cb502098ab54c679367b2c7374fd6ca2da413_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:eff6e4643347f77c419cb3e32b4c9d914762b9f2114e832126964850b7179967_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "RHBZ#2487938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487938"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44492"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv",
"url": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv"
}
],
"release_date": "2026-06-11T15:29:13.890000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T16:07:52+00:00",
"details": "See Kiali 1.73.33 documentation at https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/service_mesh/service-mesh-2-x",
"product_ids": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:431be7a67581ddb521dc3e8a2d7fb59fdc2bfe8362e364aed4cdc8bb441495c0_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:71bf14b0c1b05f821567971253f304ccc8a58cc682aa9dfe2805dc096f29ce39_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:75a4205abf3e9d948907598c52e18b89d5656e3bab72846319ca9d7162c9b123_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:f71032abc7a0d0885b56bf99a59c0b8800844297c0ff96fb2561edc493a0a0a2_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:70f6b5471f8994330a6659bc2b863bff2792552231237d217825d432c166dfd9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:cf60d7a68c8b997e899f71a049e0d43d6d07115ed544a79db569bc8c33306e75_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ed47a2c0145d0e71f6c7dca89f1cb502098ab54c679367b2c7374fd6ca2da413_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:eff6e4643347f77c419cb3e32b4c9d914762b9f2114e832126964850b7179967_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33155"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:431be7a67581ddb521dc3e8a2d7fb59fdc2bfe8362e364aed4cdc8bb441495c0_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:71bf14b0c1b05f821567971253f304ccc8a58cc682aa9dfe2805dc096f29ce39_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:75a4205abf3e9d948907598c52e18b89d5656e3bab72846319ca9d7162c9b123_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:f71032abc7a0d0885b56bf99a59c0b8800844297c0ff96fb2561edc493a0a0a2_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:70f6b5471f8994330a6659bc2b863bff2792552231237d217825d432c166dfd9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:cf60d7a68c8b997e899f71a049e0d43d6d07115ed544a79db569bc8c33306e75_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ed47a2c0145d0e71f6c7dca89f1cb502098ab54c679367b2c7374fd6ca2da413_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:eff6e4643347f77c419cb3e32b4c9d914762b9f2114e832126964850b7179967_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:431be7a67581ddb521dc3e8a2d7fb59fdc2bfe8362e364aed4cdc8bb441495c0_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:71bf14b0c1b05f821567971253f304ccc8a58cc682aa9dfe2805dc096f29ce39_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:75a4205abf3e9d948907598c52e18b89d5656e3bab72846319ca9d7162c9b123_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:f71032abc7a0d0885b56bf99a59c0b8800844297c0ff96fb2561edc493a0a0a2_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:70f6b5471f8994330a6659bc2b863bff2792552231237d217825d432c166dfd9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:cf60d7a68c8b997e899f71a049e0d43d6d07115ed544a79db569bc8c33306e75_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ed47a2c0145d0e71f6c7dca89f1cb502098ab54c679367b2c7374fd6ca2da413_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:eff6e4643347f77c419cb3e32b4c9d914762b9f2114e832126964850b7179967_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization"
},
{
"cve": "CVE-2026-44494",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:01:12.945664+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487942"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. This vulnerability, a Prototype Pollution \"Gadget\" attack, allows an attacker to escalate any existing Object.prototype pollution in an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the Axios library allows an attacker to escalate existing prototype pollution vulnerabilities within an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. By injecting a malicious proxy configuration into the `Object.prototype`, an attacker can intercept, read, and modify all HTTP traffic, including sensitive authentication credentials, without direct user interaction. This poses a significant risk to data confidentiality and integrity in Red Hat products that utilize the Axios library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:431be7a67581ddb521dc3e8a2d7fb59fdc2bfe8362e364aed4cdc8bb441495c0_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:71bf14b0c1b05f821567971253f304ccc8a58cc682aa9dfe2805dc096f29ce39_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:75a4205abf3e9d948907598c52e18b89d5656e3bab72846319ca9d7162c9b123_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:f71032abc7a0d0885b56bf99a59c0b8800844297c0ff96fb2561edc493a0a0a2_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:70f6b5471f8994330a6659bc2b863bff2792552231237d217825d432c166dfd9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:cf60d7a68c8b997e899f71a049e0d43d6d07115ed544a79db569bc8c33306e75_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ed47a2c0145d0e71f6c7dca89f1cb502098ab54c679367b2c7374fd6ca2da413_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:eff6e4643347f77c419cb3e32b4c9d914762b9f2114e832126964850b7179967_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "RHBZ#2487942",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487942"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44494",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44494"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh",
"url": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh"
}
],
"release_date": "2026-06-11T15:32:03.155000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T16:07:52+00:00",
"details": "See Kiali 1.73.33 documentation at https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/service_mesh/service-mesh-2-x",
"product_ids": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:431be7a67581ddb521dc3e8a2d7fb59fdc2bfe8362e364aed4cdc8bb441495c0_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:71bf14b0c1b05f821567971253f304ccc8a58cc682aa9dfe2805dc096f29ce39_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:75a4205abf3e9d948907598c52e18b89d5656e3bab72846319ca9d7162c9b123_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:f71032abc7a0d0885b56bf99a59c0b8800844297c0ff96fb2561edc493a0a0a2_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:70f6b5471f8994330a6659bc2b863bff2792552231237d217825d432c166dfd9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:cf60d7a68c8b997e899f71a049e0d43d6d07115ed544a79db569bc8c33306e75_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ed47a2c0145d0e71f6c7dca89f1cb502098ab54c679367b2c7374fd6ca2da413_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:eff6e4643347f77c419cb3e32b4c9d914762b9f2114e832126964850b7179967_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33155"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:431be7a67581ddb521dc3e8a2d7fb59fdc2bfe8362e364aed4cdc8bb441495c0_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:71bf14b0c1b05f821567971253f304ccc8a58cc682aa9dfe2805dc096f29ce39_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:75a4205abf3e9d948907598c52e18b89d5656e3bab72846319ca9d7162c9b123_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:f71032abc7a0d0885b56bf99a59c0b8800844297c0ff96fb2561edc493a0a0a2_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:70f6b5471f8994330a6659bc2b863bff2792552231237d217825d432c166dfd9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:cf60d7a68c8b997e899f71a049e0d43d6d07115ed544a79db569bc8c33306e75_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ed47a2c0145d0e71f6c7dca89f1cb502098ab54c679367b2c7374fd6ca2da413_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:eff6e4643347f77c419cb3e32b4c9d914762b9f2114e832126964850b7179967_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:431be7a67581ddb521dc3e8a2d7fb59fdc2bfe8362e364aed4cdc8bb441495c0_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:71bf14b0c1b05f821567971253f304ccc8a58cc682aa9dfe2805dc096f29ce39_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:75a4205abf3e9d948907598c52e18b89d5656e3bab72846319ca9d7162c9b123_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:f71032abc7a0d0885b56bf99a59c0b8800844297c0ff96fb2561edc493a0a0a2_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:70f6b5471f8994330a6659bc2b863bff2792552231237d217825d432c166dfd9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:cf60d7a68c8b997e899f71a049e0d43d6d07115ed544a79db569bc8c33306e75_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ed47a2c0145d0e71f6c7dca89f1cb502098ab54c679367b2c7374fd6ca2da413_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:eff6e4643347f77c419cb3e32b4c9d914762b9f2114e832126964850b7179967_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution"
},
{
"cve": "CVE-2026-44495",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:00:53.999811+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487937"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure due to prototype pollution vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Axios, a promise-based HTTP client, can lead to information disclosure, including credential theft and response hijacking, or denial of service. Exploitation requires a separate prototype pollution vulnerability in the same JavaScript process, allowing an attacker to control `Object.prototype.transformResponse`. Red Hat products using affected Axios versions are at risk if another component introduces such pollution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:431be7a67581ddb521dc3e8a2d7fb59fdc2bfe8362e364aed4cdc8bb441495c0_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:71bf14b0c1b05f821567971253f304ccc8a58cc682aa9dfe2805dc096f29ce39_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:75a4205abf3e9d948907598c52e18b89d5656e3bab72846319ca9d7162c9b123_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:f71032abc7a0d0885b56bf99a59c0b8800844297c0ff96fb2561edc493a0a0a2_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:70f6b5471f8994330a6659bc2b863bff2792552231237d217825d432c166dfd9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:cf60d7a68c8b997e899f71a049e0d43d6d07115ed544a79db569bc8c33306e75_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ed47a2c0145d0e71f6c7dca89f1cb502098ab54c679367b2c7374fd6ca2da413_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:eff6e4643347f77c419cb3e32b4c9d914762b9f2114e832126964850b7179967_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "RHBZ#2487937",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487937"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44495",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw"
}
],
"release_date": "2026-06-11T15:33:12.433000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T16:07:52+00:00",
"details": "See Kiali 1.73.33 documentation at https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/service_mesh/service-mesh-2-x",
"product_ids": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:431be7a67581ddb521dc3e8a2d7fb59fdc2bfe8362e364aed4cdc8bb441495c0_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:71bf14b0c1b05f821567971253f304ccc8a58cc682aa9dfe2805dc096f29ce39_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:75a4205abf3e9d948907598c52e18b89d5656e3bab72846319ca9d7162c9b123_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:f71032abc7a0d0885b56bf99a59c0b8800844297c0ff96fb2561edc493a0a0a2_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:70f6b5471f8994330a6659bc2b863bff2792552231237d217825d432c166dfd9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:cf60d7a68c8b997e899f71a049e0d43d6d07115ed544a79db569bc8c33306e75_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ed47a2c0145d0e71f6c7dca89f1cb502098ab54c679367b2c7374fd6ca2da413_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:eff6e4643347f77c419cb3e32b4c9d914762b9f2114e832126964850b7179967_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33155"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:431be7a67581ddb521dc3e8a2d7fb59fdc2bfe8362e364aed4cdc8bb441495c0_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:71bf14b0c1b05f821567971253f304ccc8a58cc682aa9dfe2805dc096f29ce39_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:75a4205abf3e9d948907598c52e18b89d5656e3bab72846319ca9d7162c9b123_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:f71032abc7a0d0885b56bf99a59c0b8800844297c0ff96fb2561edc493a0a0a2_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:70f6b5471f8994330a6659bc2b863bff2792552231237d217825d432c166dfd9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:cf60d7a68c8b997e899f71a049e0d43d6d07115ed544a79db569bc8c33306e75_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ed47a2c0145d0e71f6c7dca89f1cb502098ab54c679367b2c7374fd6ca2da413_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:eff6e4643347f77c419cb3e32b4c9d914762b9f2114e832126964850b7179967_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:431be7a67581ddb521dc3e8a2d7fb59fdc2bfe8362e364aed4cdc8bb441495c0_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:71bf14b0c1b05f821567971253f304ccc8a58cc682aa9dfe2805dc096f29ce39_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:75a4205abf3e9d948907598c52e18b89d5656e3bab72846319ca9d7162c9b123_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:f71032abc7a0d0885b56bf99a59c0b8800844297c0ff96fb2561edc493a0a0a2_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:70f6b5471f8994330a6659bc2b863bff2792552231237d217825d432c166dfd9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:cf60d7a68c8b997e899f71a049e0d43d6d07115ed544a79db569bc8c33306e75_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ed47a2c0145d0e71f6c7dca89f1cb502098ab54c679367b2c7374fd6ca2da413_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:eff6e4643347f77c419cb3e32b4c9d914762b9f2114e832126964850b7179967_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure due to prototype pollution vulnerability"
},
{
"cve": "CVE-2026-44496",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-06-11T17:01:15.856386+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487943"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in Axios can lead to a client-side Denial of Service. An attacker capable of influencing the XSRF cookie name within a browser environment could trigger excessive regular expression processing, causing the affected browser tab to freeze and degrade user availability. This issue specifically impacts browser-based applications and does not affect Node.js HTTP adapter usage, React Native, or web workers.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:431be7a67581ddb521dc3e8a2d7fb59fdc2bfe8362e364aed4cdc8bb441495c0_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:71bf14b0c1b05f821567971253f304ccc8a58cc682aa9dfe2805dc096f29ce39_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:75a4205abf3e9d948907598c52e18b89d5656e3bab72846319ca9d7162c9b123_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:f71032abc7a0d0885b56bf99a59c0b8800844297c0ff96fb2561edc493a0a0a2_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:70f6b5471f8994330a6659bc2b863bff2792552231237d217825d432c166dfd9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:cf60d7a68c8b997e899f71a049e0d43d6d07115ed544a79db569bc8c33306e75_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ed47a2c0145d0e71f6c7dca89f1cb502098ab54c679367b2c7374fd6ca2da413_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:eff6e4643347f77c419cb3e32b4c9d914762b9f2114e832126964850b7179967_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "RHBZ#2487943",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487943"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44496",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44496"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf"
}
],
"release_date": "2026-06-11T15:34:28.492000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T16:07:52+00:00",
"details": "See Kiali 1.73.33 documentation at https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/service_mesh/service-mesh-2-x",
"product_ids": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:431be7a67581ddb521dc3e8a2d7fb59fdc2bfe8362e364aed4cdc8bb441495c0_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:71bf14b0c1b05f821567971253f304ccc8a58cc682aa9dfe2805dc096f29ce39_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:75a4205abf3e9d948907598c52e18b89d5656e3bab72846319ca9d7162c9b123_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:f71032abc7a0d0885b56bf99a59c0b8800844297c0ff96fb2561edc493a0a0a2_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:70f6b5471f8994330a6659bc2b863bff2792552231237d217825d432c166dfd9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:cf60d7a68c8b997e899f71a049e0d43d6d07115ed544a79db569bc8c33306e75_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ed47a2c0145d0e71f6c7dca89f1cb502098ab54c679367b2c7374fd6ca2da413_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:eff6e4643347f77c419cb3e32b4c9d914762b9f2114e832126964850b7179967_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33155"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:431be7a67581ddb521dc3e8a2d7fb59fdc2bfe8362e364aed4cdc8bb441495c0_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:71bf14b0c1b05f821567971253f304ccc8a58cc682aa9dfe2805dc096f29ce39_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:75a4205abf3e9d948907598c52e18b89d5656e3bab72846319ca9d7162c9b123_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:f71032abc7a0d0885b56bf99a59c0b8800844297c0ff96fb2561edc493a0a0a2_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:70f6b5471f8994330a6659bc2b863bff2792552231237d217825d432c166dfd9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:cf60d7a68c8b997e899f71a049e0d43d6d07115ed544a79db569bc8c33306e75_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ed47a2c0145d0e71f6c7dca89f1cb502098ab54c679367b2c7374fd6ca2da413_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:eff6e4643347f77c419cb3e32b4c9d914762b9f2114e832126964850b7179967_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:431be7a67581ddb521dc3e8a2d7fb59fdc2bfe8362e364aed4cdc8bb441495c0_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:71bf14b0c1b05f821567971253f304ccc8a58cc682aa9dfe2805dc096f29ce39_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:75a4205abf3e9d948907598c52e18b89d5656e3bab72846319ca9d7162c9b123_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:f71032abc7a0d0885b56bf99a59c0b8800844297c0ff96fb2561edc493a0a0a2_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:70f6b5471f8994330a6659bc2b863bff2792552231237d217825d432c166dfd9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:cf60d7a68c8b997e899f71a049e0d43d6d07115ed544a79db569bc8c33306e75_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ed47a2c0145d0e71f6c7dca89f1cb502098ab54c679367b2c7374fd6ca2da413_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:eff6e4643347f77c419cb3e32b4c9d914762b9f2114e832126964850b7179967_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name"
},
{
"cve": "CVE-2026-48779",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-16T22:01:24.571224+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2489661"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that consume excessive memory. Consequently, this leads to process termination and a denial of service (DoS) for the remote peer.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `ws` WebSocket library. A remote attacker can exploit this flaw by sending a high volume of small, fragmented data, leading to excessive memory consumption and subsequent process termination. This can result in service disruption for Red Hat products that utilize `ws` for WebSocket communication.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:431be7a67581ddb521dc3e8a2d7fb59fdc2bfe8362e364aed4cdc8bb441495c0_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:71bf14b0c1b05f821567971253f304ccc8a58cc682aa9dfe2805dc096f29ce39_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:75a4205abf3e9d948907598c52e18b89d5656e3bab72846319ca9d7162c9b123_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:f71032abc7a0d0885b56bf99a59c0b8800844297c0ff96fb2561edc493a0a0a2_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:70f6b5471f8994330a6659bc2b863bff2792552231237d217825d432c166dfd9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:cf60d7a68c8b997e899f71a049e0d43d6d07115ed544a79db569bc8c33306e75_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ed47a2c0145d0e71f6c7dca89f1cb502098ab54c679367b2c7374fd6ca2da413_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:eff6e4643347f77c419cb3e32b4c9d914762b9f2114e832126964850b7179967_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48779"
},
{
"category": "external",
"summary": "RHBZ#2489661",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489661"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48779",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48779"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48779",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48779"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7",
"url": "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53",
"url": "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94",
"url": "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8",
"url": "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p",
"url": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p"
}
],
"release_date": "2026-06-16T21:26:22.537000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T16:07:52+00:00",
"details": "See Kiali 1.73.33 documentation at https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/service_mesh/service-mesh-2-x",
"product_ids": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:431be7a67581ddb521dc3e8a2d7fb59fdc2bfe8362e364aed4cdc8bb441495c0_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:71bf14b0c1b05f821567971253f304ccc8a58cc682aa9dfe2805dc096f29ce39_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:75a4205abf3e9d948907598c52e18b89d5656e3bab72846319ca9d7162c9b123_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:f71032abc7a0d0885b56bf99a59c0b8800844297c0ff96fb2561edc493a0a0a2_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:70f6b5471f8994330a6659bc2b863bff2792552231237d217825d432c166dfd9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:cf60d7a68c8b997e899f71a049e0d43d6d07115ed544a79db569bc8c33306e75_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ed47a2c0145d0e71f6c7dca89f1cb502098ab54c679367b2c7374fd6ca2da413_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:eff6e4643347f77c419cb3e32b4c9d914762b9f2114e832126964850b7179967_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33155"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:431be7a67581ddb521dc3e8a2d7fb59fdc2bfe8362e364aed4cdc8bb441495c0_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:71bf14b0c1b05f821567971253f304ccc8a58cc682aa9dfe2805dc096f29ce39_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:75a4205abf3e9d948907598c52e18b89d5656e3bab72846319ca9d7162c9b123_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:f71032abc7a0d0885b56bf99a59c0b8800844297c0ff96fb2561edc493a0a0a2_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:70f6b5471f8994330a6659bc2b863bff2792552231237d217825d432c166dfd9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:cf60d7a68c8b997e899f71a049e0d43d6d07115ed544a79db569bc8c33306e75_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ed47a2c0145d0e71f6c7dca89f1cb502098ab54c679367b2c7374fd6ca2da413_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:eff6e4643347f77c419cb3e32b4c9d914762b9f2114e832126964850b7179967_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:431be7a67581ddb521dc3e8a2d7fb59fdc2bfe8362e364aed4cdc8bb441495c0_amd64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:71bf14b0c1b05f821567971253f304ccc8a58cc682aa9dfe2805dc096f29ce39_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:75a4205abf3e9d948907598c52e18b89d5656e3bab72846319ca9d7162c9b123_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8@sha256:f71032abc7a0d0885b56bf99a59c0b8800844297c0ff96fb2561edc493a0a0a2_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:70f6b5471f8994330a6659bc2b863bff2792552231237d217825d432c166dfd9_arm64",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:cf60d7a68c8b997e899f71a049e0d43d6d07115ed544a79db569bc8c33306e75_ppc64le",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:ed47a2c0145d0e71f6c7dca89f1cb502098ab54c679367b2c7374fd6ca2da413_s390x",
"Red Hat OpenShift Service Mesh 2.6:registry.redhat.io/openshift-service-mesh/kiali-rhel8@sha256:eff6e4643347f77c419cb3e32b4c9d914762b9f2114e832126964850b7179967_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments"
}
]
}
RHSA-2026:33160
Vulnerability from csaf_redhat - Published: 2026-06-29 16:36 - Updated: 2026-08-10 09:21Summary
Red Hat Security Advisory: Kiali 2.4.19 for Red Hat OpenShift Service Mesh 3.0
Severity
Important
Notes
Topic: Kiali 2.4.19 for Red Hat OpenShift Service Mesh 3.0 is now available.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Kiali 2.4.19, for Red Hat OpenShift Service Mesh 3.0, provides observability for the service mesh by offering a visual representation of the mesh topology and metrics, helping users monitor, trace, and manage efficiently.
Security Fix(es):
* CVE-2026-42338 openshift-service-mesh/kiali-ossmc-rhel9: ip-address: Cross-site scripting via improper HTML escaping of untrusted input (OSSM-14061)
* CVE-2026-42338 openshift-service-mesh/kiali-rhel9: ip-address: Cross-site scripting via improper HTML escaping of untrusted input (OSSM-14069)
* CVE-2026-39821 openshift-service-mesh/kiali-rhel9: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (OSSM-14072)
* CVE-2026-44495 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Information disclosure due to prototype pollution vulnerability (OSSM-14136)
* CVE-2026-44495 openshift-service-mesh/kiali-rhel9: Axios: Information disclosure due to prototype pollution vulnerability (OSSM-14140)
* CVE-2026-44488 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Denial of Service due to unenforced request and response size limits (OSSM-14150)
* CVE-2026-44488 openshift-service-mesh/kiali-rhel9: Axios: Denial of Service due to unenforced request and response size limits (OSSM-14155)
* CVE-2026-44487 openshift-service-mesh/kiali-rhel9: Axios: Information disclosure of proxy credentials via redirect flows (OSSM-14169)
* CVE-2026-44487 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Information disclosure of proxy credentials via redirect flows (OSSM-14178)
* CVE-2026-44494 openshift-service-mesh/kiali-rhel9: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution (OSSM-14181)
* CVE-2026-44494 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution (OSSM-14183)
* CVE-2026-44496 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name (OSSM-14190)
* CVE-2026-44496 openshift-service-mesh/kiali-rhel9: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name (OSSM-14192)
* CVE-2026-44486 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Information disclosure of proxy credentials via HTTP redirects (OSSM-14194)
* CVE-2026-44486 openshift-service-mesh/kiali-rhel9: Axios: Information disclosure of proxy credentials via HTTP redirects (OSSM-14208)
* CVE-2026-44492 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization (OSSM-14218)
* CVE-2026-44492 openshift-service-mesh/kiali-rhel9: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization (OSSM-14225)
* CVE-2026-48779 openshift-service-mesh/kiali-rhel9: ws: Denial of Service via memory exhaustion from small WebSocket fragments (OSSM-14302)
* CVE-2026-48779 openshift-service-mesh/kiali-ossmc-rhel9: ws: Denial of Service via memory exhaustion from small WebSocket fragments (OSSM-14306)
* CVE-2026-12143 openshift-service-mesh/kiali-ossmc-rhel9: form-data: Form field override via CRLF injection (OSSM-14334)
* CVE-2026-12143 openshift-service-mesh/kiali-rhel9: form-data: Form field override via CRLF injection (OSSM-14339)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:163c0867091d50fae1acfc08b5631ada2be4a49c056adbee9a60166b97a88d5d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:527644abdbe3cabab1f48223a1c0ee8048d7ced2b331c6b50cb0f08decfd6b4c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:7072a730964e67001c15c156743e2726bb6dbaf7d8ee6338c337d94fafb079ed_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ab8453c70ec43c8782332d31f81758a47d79703bbfc06965947ab7d72404c374_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:12ce2d6283ac3fe295e53ac099b14222722fdcb9c549fbe2243ae83069f3cfa4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:1b110d69b83fa0ed08e2cf38a981ad4fcadc8d01b0f9e4b1c0f4f93eba00df55_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c878bf475fb5ded36d666d59a5d1d7a15e4ec3ba0b54893cc09180e1af431db6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cf2dbdd1c93fe967961000699880b74f2234de06335682f264dac8fdd96fef09_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:12ce2d6283ac3fe295e53ac099b14222722fdcb9c549fbe2243ae83069f3cfa4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:1b110d69b83fa0ed08e2cf38a981ad4fcadc8d01b0f9e4b1c0f4f93eba00df55_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c878bf475fb5ded36d666d59a5d1d7a15e4ec3ba0b54893cc09180e1af431db6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cf2dbdd1c93fe967961000699880b74f2234de06335682f264dac8fdd96fef09_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:163c0867091d50fae1acfc08b5631ada2be4a49c056adbee9a60166b97a88d5d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:527644abdbe3cabab1f48223a1c0ee8048d7ced2b331c6b50cb0f08decfd6b4c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:7072a730964e67001c15c156743e2726bb6dbaf7d8ee6338c337d94fafb079ed_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ab8453c70ec43c8782332d31f81758a47d79703bbfc06965947ab7d72404c374_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in ip-address, a JavaScript library for parsing and manipulating IPv4 and IPv6 addresses. This vulnerability allows a remote attacker to perform cross-site scripting (XSS) by providing untrusted input to the Address6 constructor. When an application renders the output of Address6.group(), Address6.link(), or the AddressError.parseMessage as HTML without proper escaping, the attacker-controlled content can be executed in the user's browser.
8.1 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:163c0867091d50fae1acfc08b5631ada2be4a49c056adbee9a60166b97a88d5d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:527644abdbe3cabab1f48223a1c0ee8048d7ced2b331c6b50cb0f08decfd6b4c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:7072a730964e67001c15c156743e2726bb6dbaf7d8ee6338c337d94fafb079ed_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ab8453c70ec43c8782332d31f81758a47d79703bbfc06965947ab7d72404c374_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:12ce2d6283ac3fe295e53ac099b14222722fdcb9c549fbe2243ae83069f3cfa4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:1b110d69b83fa0ed08e2cf38a981ad4fcadc8d01b0f9e4b1c0f4f93eba00df55_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c878bf475fb5ded36d666d59a5d1d7a15e4ec3ba0b54893cc09180e1af431db6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cf2dbdd1c93fe967961000699880b74f2234de06335682f264dac8fdd96fef09_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:163c0867091d50fae1acfc08b5631ada2be4a49c056adbee9a60166b97a88d5d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:527644abdbe3cabab1f48223a1c0ee8048d7ced2b331c6b50cb0f08decfd6b4c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:7072a730964e67001c15c156743e2726bb6dbaf7d8ee6338c337d94fafb079ed_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ab8453c70ec43c8782332d31f81758a47d79703bbfc06965947ab7d72404c374_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:12ce2d6283ac3fe295e53ac099b14222722fdcb9c549fbe2243ae83069f3cfa4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:1b110d69b83fa0ed08e2cf38a981ad4fcadc8d01b0f9e4b1c0f4f93eba00df55_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c878bf475fb5ded36d666d59a5d1d7a15e4ec3ba0b54893cc09180e1af431db6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cf2dbdd1c93fe967961000699880b74f2234de06335682f264dac8fdd96fef09_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:163c0867091d50fae1acfc08b5631ada2be4a49c056adbee9a60166b97a88d5d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:527644abdbe3cabab1f48223a1c0ee8048d7ced2b331c6b50cb0f08decfd6b4c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:7072a730964e67001c15c156743e2726bb6dbaf7d8ee6338c337d94fafb079ed_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ab8453c70ec43c8782332d31f81758a47d79703bbfc06965947ab7d72404c374_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:12ce2d6283ac3fe295e53ac099b14222722fdcb9c549fbe2243ae83069f3cfa4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:1b110d69b83fa0ed08e2cf38a981ad4fcadc8d01b0f9e4b1c0f4f93eba00df55_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c878bf475fb5ded36d666d59a5d1d7a15e4ec3ba0b54893cc09180e1af431db6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cf2dbdd1c93fe967961000699880b74f2234de06335682f264dac8fdd96fef09_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:163c0867091d50fae1acfc08b5631ada2be4a49c056adbee9a60166b97a88d5d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:527644abdbe3cabab1f48223a1c0ee8048d7ced2b331c6b50cb0f08decfd6b4c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:7072a730964e67001c15c156743e2726bb6dbaf7d8ee6338c337d94fafb079ed_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ab8453c70ec43c8782332d31f81758a47d79703bbfc06965947ab7d72404c374_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:12ce2d6283ac3fe295e53ac099b14222722fdcb9c549fbe2243ae83069f3cfa4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:1b110d69b83fa0ed08e2cf38a981ad4fcadc8d01b0f9e4b1c0f4f93eba00df55_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c878bf475fb5ded36d666d59a5d1d7a15e4ec3ba0b54893cc09180e1af431db6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cf2dbdd1c93fe967961000699880b74f2234de06335682f264dac8fdd96fef09_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.
8.6 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:163c0867091d50fae1acfc08b5631ada2be4a49c056adbee9a60166b97a88d5d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:527644abdbe3cabab1f48223a1c0ee8048d7ced2b331c6b50cb0f08decfd6b4c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:7072a730964e67001c15c156743e2726bb6dbaf7d8ee6338c337d94fafb079ed_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ab8453c70ec43c8782332d31f81758a47d79703bbfc06965947ab7d72404c374_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:12ce2d6283ac3fe295e53ac099b14222722fdcb9c549fbe2243ae83069f3cfa4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:1b110d69b83fa0ed08e2cf38a981ad4fcadc8d01b0f9e4b1c0f4f93eba00df55_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c878bf475fb5ded36d666d59a5d1d7a15e4ec3ba0b54893cc09180e1af431db6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cf2dbdd1c93fe967961000699880b74f2234de06335682f264dac8fdd96fef09_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. This vulnerability, a Prototype Pollution "Gadget" attack, allows an attacker to escalate any existing Object.prototype pollution in an application's dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.
8.7 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:163c0867091d50fae1acfc08b5631ada2be4a49c056adbee9a60166b97a88d5d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:527644abdbe3cabab1f48223a1c0ee8048d7ced2b331c6b50cb0f08decfd6b4c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:7072a730964e67001c15c156743e2726bb6dbaf7d8ee6338c337d94fafb079ed_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ab8453c70ec43c8782332d31f81758a47d79703bbfc06965947ab7d72404c374_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:12ce2d6283ac3fe295e53ac099b14222722fdcb9c549fbe2243ae83069f3cfa4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:1b110d69b83fa0ed08e2cf38a981ad4fcadc8d01b0f9e4b1c0f4f93eba00df55_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c878bf475fb5ded36d666d59a5d1d7a15e4ec3ba0b54893cc09180e1af431db6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cf2dbdd1c93fe967961000699880b74f2234de06335682f264dac8fdd96fef09_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.
7.0 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:163c0867091d50fae1acfc08b5631ada2be4a49c056adbee9a60166b97a88d5d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:527644abdbe3cabab1f48223a1c0ee8048d7ced2b331c6b50cb0f08decfd6b4c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:7072a730964e67001c15c156743e2726bb6dbaf7d8ee6338c337d94fafb079ed_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ab8453c70ec43c8782332d31f81758a47d79703bbfc06965947ab7d72404c374_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:12ce2d6283ac3fe295e53ac099b14222722fdcb9c549fbe2243ae83069f3cfa4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:1b110d69b83fa0ed08e2cf38a981ad4fcadc8d01b0f9e4b1c0f4f93eba00df55_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c878bf475fb5ded36d666d59a5d1d7a15e4ec3ba0b54893cc09180e1af431db6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cf2dbdd1c93fe967961000699880b74f2234de06335682f264dac8fdd96fef09_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:163c0867091d50fae1acfc08b5631ada2be4a49c056adbee9a60166b97a88d5d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:527644abdbe3cabab1f48223a1c0ee8048d7ced2b331c6b50cb0f08decfd6b4c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:7072a730964e67001c15c156743e2726bb6dbaf7d8ee6338c337d94fafb079ed_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ab8453c70ec43c8782332d31f81758a47d79703bbfc06965947ab7d72404c374_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:12ce2d6283ac3fe295e53ac099b14222722fdcb9c549fbe2243ae83069f3cfa4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:1b110d69b83fa0ed08e2cf38a981ad4fcadc8d01b0f9e4b1c0f4f93eba00df55_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c878bf475fb5ded36d666d59a5d1d7a15e4ec3ba0b54893cc09180e1af431db6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cf2dbdd1c93fe967961000699880b74f2234de06335682f264dac8fdd96fef09_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that consume excessive memory. Consequently, this leads to process termination and a denial of service (DoS) for the remote peer.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:163c0867091d50fae1acfc08b5631ada2be4a49c056adbee9a60166b97a88d5d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:527644abdbe3cabab1f48223a1c0ee8048d7ced2b331c6b50cb0f08decfd6b4c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:7072a730964e67001c15c156743e2726bb6dbaf7d8ee6338c337d94fafb079ed_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ab8453c70ec43c8782332d31f81758a47d79703bbfc06965947ab7d72404c374_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:12ce2d6283ac3fe295e53ac099b14222722fdcb9c549fbe2243ae83069f3cfa4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:1b110d69b83fa0ed08e2cf38a981ad4fcadc8d01b0f9e4b1c0f4f93eba00df55_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c878bf475fb5ded36d666d59a5d1d7a15e4ec3ba0b54893cc09180e1af431db6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cf2dbdd1c93fe967961000699880b74f2234de06335682f264dac8fdd96fef09_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
83 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Kiali 2.4.19 for Red Hat OpenShift Service Mesh 3.0 is now available.\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Kiali 2.4.19, for Red Hat OpenShift Service Mesh 3.0, provides observability for the service mesh by offering a visual representation of the mesh topology and metrics, helping users monitor, trace, and manage efficiently.\n\nSecurity Fix(es):\n\n* CVE-2026-42338 openshift-service-mesh/kiali-ossmc-rhel9: ip-address: Cross-site scripting via improper HTML escaping of untrusted input (OSSM-14061)\n* CVE-2026-42338 openshift-service-mesh/kiali-rhel9: ip-address: Cross-site scripting via improper HTML escaping of untrusted input (OSSM-14069)\n* CVE-2026-39821 openshift-service-mesh/kiali-rhel9: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (OSSM-14072)\n* CVE-2026-44495 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Information disclosure due to prototype pollution vulnerability (OSSM-14136)\n* CVE-2026-44495 openshift-service-mesh/kiali-rhel9: Axios: Information disclosure due to prototype pollution vulnerability (OSSM-14140)\n* CVE-2026-44488 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Denial of Service due to unenforced request and response size limits (OSSM-14150)\n* CVE-2026-44488 openshift-service-mesh/kiali-rhel9: Axios: Denial of Service due to unenforced request and response size limits (OSSM-14155)\n* CVE-2026-44487 openshift-service-mesh/kiali-rhel9: Axios: Information disclosure of proxy credentials via redirect flows (OSSM-14169)\n* CVE-2026-44487 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Information disclosure of proxy credentials via redirect flows (OSSM-14178)\n* CVE-2026-44494 openshift-service-mesh/kiali-rhel9: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution (OSSM-14181)\n* CVE-2026-44494 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution (OSSM-14183)\n* CVE-2026-44496 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name (OSSM-14190)\n* CVE-2026-44496 openshift-service-mesh/kiali-rhel9: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name (OSSM-14192)\n* CVE-2026-44486 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Information disclosure of proxy credentials via HTTP redirects (OSSM-14194)\n* CVE-2026-44486 openshift-service-mesh/kiali-rhel9: Axios: Information disclosure of proxy credentials via HTTP redirects (OSSM-14208)\n* CVE-2026-44492 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization (OSSM-14218)\n* CVE-2026-44492 openshift-service-mesh/kiali-rhel9: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization (OSSM-14225)\n* CVE-2026-48779 openshift-service-mesh/kiali-rhel9: ws: Denial of Service via memory exhaustion from small WebSocket fragments (OSSM-14302)\n* CVE-2026-48779 openshift-service-mesh/kiali-ossmc-rhel9: ws: Denial of Service via memory exhaustion from small WebSocket fragments (OSSM-14306)\n* CVE-2026-12143 openshift-service-mesh/kiali-ossmc-rhel9: form-data: Form field override via CRLF injection (OSSM-14334)\n* CVE-2026-12143 openshift-service-mesh/kiali-rhel9: form-data: Form field override via CRLF injection (OSSM-14339)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:33160",
"url": "https://access.redhat.com/errata/RHSA-2026:33160"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-12143",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42338",
"url": "https://access.redhat.com/security/cve/CVE-2026-42338"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44486",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44487",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44488",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44492",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44494",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44495",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44496",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-48779",
"url": "https://access.redhat.com/security/cve/CVE-2026-48779"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification",
"url": "https://access.redhat.com/security/updates/classification"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_33160.json"
}
],
"title": "Red Hat Security Advisory: Kiali 2.4.19 for Red Hat OpenShift Service Mesh 3.0",
"tracking": {
"current_release_date": "2026-08-10T09:21:09+00:00",
"generator": {
"date": "2026-08-10T09:21:09+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.12"
}
},
"id": "RHSA-2026:33160",
"initial_release_date": "2026-06-29T16:36:30+00:00",
"revision_history": [
{
"date": "2026-06-29T16:36:30+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-08T04:36:23+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-10T09:21:09+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Service Mesh 3.0",
"product": {
"name": "Red Hat OpenShift Service Mesh 3.0",
"product_id": "Red Hat OpenShift Service Mesh 3.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:service_mesh:3.0::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Service Mesh"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:12ce2d6283ac3fe295e53ac099b14222722fdcb9c549fbe2243ae83069f3cfa4_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:12ce2d6283ac3fe295e53ac099b14222722fdcb9c549fbe2243ae83069f3cfa4_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:12ce2d6283ac3fe295e53ac099b14222722fdcb9c549fbe2243ae83069f3cfa4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9@sha256%3A12ce2d6283ac3fe295e53ac099b14222722fdcb9c549fbe2243ae83069f3cfa4?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-rhel9\u0026tag=1782201833"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:7072a730964e67001c15c156743e2726bb6dbaf7d8ee6338c337d94fafb079ed_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:7072a730964e67001c15c156743e2726bb6dbaf7d8ee6338c337d94fafb079ed_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:7072a730964e67001c15c156743e2726bb6dbaf7d8ee6338c337d94fafb079ed_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel9@sha256%3A7072a730964e67001c15c156743e2726bb6dbaf7d8ee6338c337d94fafb079ed?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9\u0026tag=1782201894"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cf2dbdd1c93fe967961000699880b74f2234de06335682f264dac8fdd96fef09_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cf2dbdd1c93fe967961000699880b74f2234de06335682f264dac8fdd96fef09_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cf2dbdd1c93fe967961000699880b74f2234de06335682f264dac8fdd96fef09_arm64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9@sha256%3Acf2dbdd1c93fe967961000699880b74f2234de06335682f264dac8fdd96fef09?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-rhel9\u0026tag=1782201833"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:163c0867091d50fae1acfc08b5631ada2be4a49c056adbee9a60166b97a88d5d_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:163c0867091d50fae1acfc08b5631ada2be4a49c056adbee9a60166b97a88d5d_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:163c0867091d50fae1acfc08b5631ada2be4a49c056adbee9a60166b97a88d5d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel9@sha256%3A163c0867091d50fae1acfc08b5631ada2be4a49c056adbee9a60166b97a88d5d?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9\u0026tag=1782201894"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:1b110d69b83fa0ed08e2cf38a981ad4fcadc8d01b0f9e4b1c0f4f93eba00df55_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:1b110d69b83fa0ed08e2cf38a981ad4fcadc8d01b0f9e4b1c0f4f93eba00df55_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:1b110d69b83fa0ed08e2cf38a981ad4fcadc8d01b0f9e4b1c0f4f93eba00df55_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9@sha256%3A1b110d69b83fa0ed08e2cf38a981ad4fcadc8d01b0f9e4b1c0f4f93eba00df55?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-rhel9\u0026tag=1782201833"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ab8453c70ec43c8782332d31f81758a47d79703bbfc06965947ab7d72404c374_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ab8453c70ec43c8782332d31f81758a47d79703bbfc06965947ab7d72404c374_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ab8453c70ec43c8782332d31f81758a47d79703bbfc06965947ab7d72404c374_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel9@sha256%3Aab8453c70ec43c8782332d31f81758a47d79703bbfc06965947ab7d72404c374?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9\u0026tag=1782201894"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c878bf475fb5ded36d666d59a5d1d7a15e4ec3ba0b54893cc09180e1af431db6_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c878bf475fb5ded36d666d59a5d1d7a15e4ec3ba0b54893cc09180e1af431db6_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c878bf475fb5ded36d666d59a5d1d7a15e4ec3ba0b54893cc09180e1af431db6_s390x",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9@sha256%3Ac878bf475fb5ded36d666d59a5d1d7a15e4ec3ba0b54893cc09180e1af431db6?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-rhel9\u0026tag=1782201833"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:527644abdbe3cabab1f48223a1c0ee8048d7ced2b331c6b50cb0f08decfd6b4c_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:527644abdbe3cabab1f48223a1c0ee8048d7ced2b331c6b50cb0f08decfd6b4c_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:527644abdbe3cabab1f48223a1c0ee8048d7ced2b331c6b50cb0f08decfd6b4c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel9@sha256%3A527644abdbe3cabab1f48223a1c0ee8048d7ced2b331c6b50cb0f08decfd6b4c?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9\u0026tag=1782201894"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:163c0867091d50fae1acfc08b5631ada2be4a49c056adbee9a60166b97a88d5d_arm64 as a component of Red Hat OpenShift Service Mesh 3.0",
"product_id": "Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:163c0867091d50fae1acfc08b5631ada2be4a49c056adbee9a60166b97a88d5d_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:163c0867091d50fae1acfc08b5631ada2be4a49c056adbee9a60166b97a88d5d_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:527644abdbe3cabab1f48223a1c0ee8048d7ced2b331c6b50cb0f08decfd6b4c_s390x as a component of Red Hat OpenShift Service Mesh 3.0",
"product_id": "Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:527644abdbe3cabab1f48223a1c0ee8048d7ced2b331c6b50cb0f08decfd6b4c_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:527644abdbe3cabab1f48223a1c0ee8048d7ced2b331c6b50cb0f08decfd6b4c_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:7072a730964e67001c15c156743e2726bb6dbaf7d8ee6338c337d94fafb079ed_amd64 as a component of Red Hat OpenShift Service Mesh 3.0",
"product_id": "Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:7072a730964e67001c15c156743e2726bb6dbaf7d8ee6338c337d94fafb079ed_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:7072a730964e67001c15c156743e2726bb6dbaf7d8ee6338c337d94fafb079ed_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ab8453c70ec43c8782332d31f81758a47d79703bbfc06965947ab7d72404c374_ppc64le as a component of Red Hat OpenShift Service Mesh 3.0",
"product_id": "Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ab8453c70ec43c8782332d31f81758a47d79703bbfc06965947ab7d72404c374_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ab8453c70ec43c8782332d31f81758a47d79703bbfc06965947ab7d72404c374_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:12ce2d6283ac3fe295e53ac099b14222722fdcb9c549fbe2243ae83069f3cfa4_amd64 as a component of Red Hat OpenShift Service Mesh 3.0",
"product_id": "Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:12ce2d6283ac3fe295e53ac099b14222722fdcb9c549fbe2243ae83069f3cfa4_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:12ce2d6283ac3fe295e53ac099b14222722fdcb9c549fbe2243ae83069f3cfa4_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:1b110d69b83fa0ed08e2cf38a981ad4fcadc8d01b0f9e4b1c0f4f93eba00df55_ppc64le as a component of Red Hat OpenShift Service Mesh 3.0",
"product_id": "Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:1b110d69b83fa0ed08e2cf38a981ad4fcadc8d01b0f9e4b1c0f4f93eba00df55_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:1b110d69b83fa0ed08e2cf38a981ad4fcadc8d01b0f9e4b1c0f4f93eba00df55_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c878bf475fb5ded36d666d59a5d1d7a15e4ec3ba0b54893cc09180e1af431db6_s390x as a component of Red Hat OpenShift Service Mesh 3.0",
"product_id": "Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c878bf475fb5ded36d666d59a5d1d7a15e4ec3ba0b54893cc09180e1af431db6_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c878bf475fb5ded36d666d59a5d1d7a15e4ec3ba0b54893cc09180e1af431db6_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cf2dbdd1c93fe967961000699880b74f2234de06335682f264dac8fdd96fef09_arm64 as a component of Red Hat OpenShift Service Mesh 3.0",
"product_id": "Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cf2dbdd1c93fe967961000699880b74f2234de06335682f264dac8fdd96fef09_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cf2dbdd1c93fe967961000699880b74f2234de06335682f264dac8fdd96fef09_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-12143",
"cwe": {
"id": "CWE-93",
"name": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
},
"discovery_date": "2026-06-12T19:00:57.360953+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488480"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (\") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "form-data: form-data: Form field override via CRLF injection",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important impact flaw in the form-data library: a remote attacker can inject arbitrary headers or additional multipart parts via CRLF injection in field names or filenames, potentially overriding sensitive form fields and affecting data integrity.\n\nFor RHOAI and RHEL AI, severity is Moderate because affected versions appear only as a transitive npm dependency in RHOAI (dashboard, mod-arch plugins, MLflow UI) and RHEL AI 3.4 bootc images, and those products use fixed field names for uploads rather than passing untrusted user input as multipart field names or filenames. The documented exploit path is therefore not reachable in default deployments. Practical impact is limited to non-default or custom integrations that forward multipart requests using attacker-controlled field names.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:163c0867091d50fae1acfc08b5631ada2be4a49c056adbee9a60166b97a88d5d_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:527644abdbe3cabab1f48223a1c0ee8048d7ced2b331c6b50cb0f08decfd6b4c_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:7072a730964e67001c15c156743e2726bb6dbaf7d8ee6338c337d94fafb079ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ab8453c70ec43c8782332d31f81758a47d79703bbfc06965947ab7d72404c374_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:12ce2d6283ac3fe295e53ac099b14222722fdcb9c549fbe2243ae83069f3cfa4_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:1b110d69b83fa0ed08e2cf38a981ad4fcadc8d01b0f9e4b1c0f4f93eba00df55_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c878bf475fb5ded36d666d59a5d1d7a15e4ec3ba0b54893cc09180e1af431db6_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cf2dbdd1c93fe967961000699880b74f2234de06335682f264dac8fdd96fef09_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "RHBZ#2488480",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488480"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12143",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12143"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://cwe.mitre.org/data/definitions/93.html",
"url": "https://cwe.mitre.org/data/definitions/93.html"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435",
"url": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229",
"url": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045",
"url": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx",
"url": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx"
},
{
"category": "external",
"summary": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data",
"url": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/form-data",
"url": "https://www.npmjs.com/package/form-data"
}
],
"release_date": "2026-06-12T18:01:30.362000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T16:36:30+00:00",
"details": "See Kiali 2.4.19 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.0/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:163c0867091d50fae1acfc08b5631ada2be4a49c056adbee9a60166b97a88d5d_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:527644abdbe3cabab1f48223a1c0ee8048d7ced2b331c6b50cb0f08decfd6b4c_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:7072a730964e67001c15c156743e2726bb6dbaf7d8ee6338c337d94fafb079ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ab8453c70ec43c8782332d31f81758a47d79703bbfc06965947ab7d72404c374_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:12ce2d6283ac3fe295e53ac099b14222722fdcb9c549fbe2243ae83069f3cfa4_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:1b110d69b83fa0ed08e2cf38a981ad4fcadc8d01b0f9e4b1c0f4f93eba00df55_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c878bf475fb5ded36d666d59a5d1d7a15e4ec3ba0b54893cc09180e1af431db6_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cf2dbdd1c93fe967961000699880b74f2234de06335682f264dac8fdd96fef09_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33160"
},
{
"category": "workaround",
"details": "Applications using the `form-data` library should implement strict input validation and sanitization for all field names and filenames derived from untrusted sources. This prevents the injection of control characters (CR, LF, \") that could lead to header injection or form field overrides. Deployments that exclusively use fixed or trusted field names are not impacted.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:163c0867091d50fae1acfc08b5631ada2be4a49c056adbee9a60166b97a88d5d_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:527644abdbe3cabab1f48223a1c0ee8048d7ced2b331c6b50cb0f08decfd6b4c_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:7072a730964e67001c15c156743e2726bb6dbaf7d8ee6338c337d94fafb079ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ab8453c70ec43c8782332d31f81758a47d79703bbfc06965947ab7d72404c374_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:12ce2d6283ac3fe295e53ac099b14222722fdcb9c549fbe2243ae83069f3cfa4_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:1b110d69b83fa0ed08e2cf38a981ad4fcadc8d01b0f9e4b1c0f4f93eba00df55_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c878bf475fb5ded36d666d59a5d1d7a15e4ec3ba0b54893cc09180e1af431db6_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cf2dbdd1c93fe967961000699880b74f2234de06335682f264dac8fdd96fef09_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:163c0867091d50fae1acfc08b5631ada2be4a49c056adbee9a60166b97a88d5d_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:527644abdbe3cabab1f48223a1c0ee8048d7ced2b331c6b50cb0f08decfd6b4c_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:7072a730964e67001c15c156743e2726bb6dbaf7d8ee6338c337d94fafb079ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ab8453c70ec43c8782332d31f81758a47d79703bbfc06965947ab7d72404c374_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:12ce2d6283ac3fe295e53ac099b14222722fdcb9c549fbe2243ae83069f3cfa4_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:1b110d69b83fa0ed08e2cf38a981ad4fcadc8d01b0f9e4b1c0f4f93eba00df55_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c878bf475fb5ded36d666d59a5d1d7a15e4ec3ba0b54893cc09180e1af431db6_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cf2dbdd1c93fe967961000699880b74f2234de06335682f264dac8fdd96fef09_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "form-data: form-data: Form field override via CRLF injection"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:163c0867091d50fae1acfc08b5631ada2be4a49c056adbee9a60166b97a88d5d_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:527644abdbe3cabab1f48223a1c0ee8048d7ced2b331c6b50cb0f08decfd6b4c_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:7072a730964e67001c15c156743e2726bb6dbaf7d8ee6338c337d94fafb079ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ab8453c70ec43c8782332d31f81758a47d79703bbfc06965947ab7d72404c374_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:12ce2d6283ac3fe295e53ac099b14222722fdcb9c549fbe2243ae83069f3cfa4_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:1b110d69b83fa0ed08e2cf38a981ad4fcadc8d01b0f9e4b1c0f4f93eba00df55_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c878bf475fb5ded36d666d59a5d1d7a15e4ec3ba0b54893cc09180e1af431db6_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cf2dbdd1c93fe967961000699880b74f2234de06335682f264dac8fdd96fef09_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:163c0867091d50fae1acfc08b5631ada2be4a49c056adbee9a60166b97a88d5d_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:527644abdbe3cabab1f48223a1c0ee8048d7ced2b331c6b50cb0f08decfd6b4c_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:7072a730964e67001c15c156743e2726bb6dbaf7d8ee6338c337d94fafb079ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ab8453c70ec43c8782332d31f81758a47d79703bbfc06965947ab7d72404c374_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T16:36:30+00:00",
"details": "See Kiali 2.4.19 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.0/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:12ce2d6283ac3fe295e53ac099b14222722fdcb9c549fbe2243ae83069f3cfa4_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:1b110d69b83fa0ed08e2cf38a981ad4fcadc8d01b0f9e4b1c0f4f93eba00df55_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c878bf475fb5ded36d666d59a5d1d7a15e4ec3ba0b54893cc09180e1af431db6_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cf2dbdd1c93fe967961000699880b74f2234de06335682f264dac8fdd96fef09_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33160"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:163c0867091d50fae1acfc08b5631ada2be4a49c056adbee9a60166b97a88d5d_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:527644abdbe3cabab1f48223a1c0ee8048d7ced2b331c6b50cb0f08decfd6b4c_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:7072a730964e67001c15c156743e2726bb6dbaf7d8ee6338c337d94fafb079ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ab8453c70ec43c8782332d31f81758a47d79703bbfc06965947ab7d72404c374_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:12ce2d6283ac3fe295e53ac099b14222722fdcb9c549fbe2243ae83069f3cfa4_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:1b110d69b83fa0ed08e2cf38a981ad4fcadc8d01b0f9e4b1c0f4f93eba00df55_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c878bf475fb5ded36d666d59a5d1d7a15e4ec3ba0b54893cc09180e1af431db6_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cf2dbdd1c93fe967961000699880b74f2234de06335682f264dac8fdd96fef09_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:163c0867091d50fae1acfc08b5631ada2be4a49c056adbee9a60166b97a88d5d_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:527644abdbe3cabab1f48223a1c0ee8048d7ced2b331c6b50cb0f08decfd6b4c_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:7072a730964e67001c15c156743e2726bb6dbaf7d8ee6338c337d94fafb079ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ab8453c70ec43c8782332d31f81758a47d79703bbfc06965947ab7d72404c374_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:12ce2d6283ac3fe295e53ac099b14222722fdcb9c549fbe2243ae83069f3cfa4_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:1b110d69b83fa0ed08e2cf38a981ad4fcadc8d01b0f9e4b1c0f4f93eba00df55_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c878bf475fb5ded36d666d59a5d1d7a15e4ec3ba0b54893cc09180e1af431db6_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cf2dbdd1c93fe967961000699880b74f2234de06335682f264dac8fdd96fef09_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-42338",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-12T21:01:14.436876+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2476810"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ip-address, a JavaScript library for parsing and manipulating IPv4 and IPv6 addresses. This vulnerability allows a remote attacker to perform cross-site scripting (XSS) by providing untrusted input to the Address6 constructor. When an application renders the output of Address6.group(), Address6.link(), or the AddressError.parseMessage as HTML without proper escaping, the attacker-controlled content can be executed in the user\u0027s browser.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in the `ip-address` JavaScript library is rated as Important. It allows for cross-site scripting (XSS) when an application processes untrusted input through the `Address6` constructor and subsequently renders the unescaped output of methods like `Address6.group()`, `Address6.link()`, or `AddressError.parseMessage` directly as HTML. While the library itself is affected, exploitation is contingent on specific application-level rendering practices that may not be common in Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:163c0867091d50fae1acfc08b5631ada2be4a49c056adbee9a60166b97a88d5d_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:527644abdbe3cabab1f48223a1c0ee8048d7ced2b331c6b50cb0f08decfd6b4c_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:7072a730964e67001c15c156743e2726bb6dbaf7d8ee6338c337d94fafb079ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ab8453c70ec43c8782332d31f81758a47d79703bbfc06965947ab7d72404c374_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:12ce2d6283ac3fe295e53ac099b14222722fdcb9c549fbe2243ae83069f3cfa4_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:1b110d69b83fa0ed08e2cf38a981ad4fcadc8d01b0f9e4b1c0f4f93eba00df55_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c878bf475fb5ded36d666d59a5d1d7a15e4ec3ba0b54893cc09180e1af431db6_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cf2dbdd1c93fe967961000699880b74f2234de06335682f264dac8fdd96fef09_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42338"
},
{
"category": "external",
"summary": "RHBZ#2476810",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2476810"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42338",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42338"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42338",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42338"
},
{
"category": "external",
"summary": "https://github.com/beaugunderson/ip-address/security/advisories/GHSA-v2v4-37r5-5v8g",
"url": "https://github.com/beaugunderson/ip-address/security/advisories/GHSA-v2v4-37r5-5v8g"
}
],
"release_date": "2026-05-12T19:43:16.470000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T16:36:30+00:00",
"details": "See Kiali 2.4.19 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.0/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:163c0867091d50fae1acfc08b5631ada2be4a49c056adbee9a60166b97a88d5d_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:527644abdbe3cabab1f48223a1c0ee8048d7ced2b331c6b50cb0f08decfd6b4c_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:7072a730964e67001c15c156743e2726bb6dbaf7d8ee6338c337d94fafb079ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ab8453c70ec43c8782332d31f81758a47d79703bbfc06965947ab7d72404c374_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:12ce2d6283ac3fe295e53ac099b14222722fdcb9c549fbe2243ae83069f3cfa4_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:1b110d69b83fa0ed08e2cf38a981ad4fcadc8d01b0f9e4b1c0f4f93eba00df55_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c878bf475fb5ded36d666d59a5d1d7a15e4ec3ba0b54893cc09180e1af431db6_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cf2dbdd1c93fe967961000699880b74f2234de06335682f264dac8fdd96fef09_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33160"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:163c0867091d50fae1acfc08b5631ada2be4a49c056adbee9a60166b97a88d5d_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:527644abdbe3cabab1f48223a1c0ee8048d7ced2b331c6b50cb0f08decfd6b4c_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:7072a730964e67001c15c156743e2726bb6dbaf7d8ee6338c337d94fafb079ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ab8453c70ec43c8782332d31f81758a47d79703bbfc06965947ab7d72404c374_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:12ce2d6283ac3fe295e53ac099b14222722fdcb9c549fbe2243ae83069f3cfa4_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:1b110d69b83fa0ed08e2cf38a981ad4fcadc8d01b0f9e4b1c0f4f93eba00df55_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c878bf475fb5ded36d666d59a5d1d7a15e4ec3ba0b54893cc09180e1af431db6_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cf2dbdd1c93fe967961000699880b74f2234de06335682f264dac8fdd96fef09_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:163c0867091d50fae1acfc08b5631ada2be4a49c056adbee9a60166b97a88d5d_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:527644abdbe3cabab1f48223a1c0ee8048d7ced2b331c6b50cb0f08decfd6b4c_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:7072a730964e67001c15c156743e2726bb6dbaf7d8ee6338c337d94fafb079ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ab8453c70ec43c8782332d31f81758a47d79703bbfc06965947ab7d72404c374_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:12ce2d6283ac3fe295e53ac099b14222722fdcb9c549fbe2243ae83069f3cfa4_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:1b110d69b83fa0ed08e2cf38a981ad4fcadc8d01b0f9e4b1c0f4f93eba00df55_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c878bf475fb5ded36d666d59a5d1d7a15e4ec3ba0b54893cc09180e1af431db6_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cf2dbdd1c93fe967961000699880b74f2234de06335682f264dac8fdd96fef09_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input"
},
{
"cve": "CVE-2026-44486",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:30.944384+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487947"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in the Axios Node.js HTTP adapter. Red Hat products utilizing Axios in a Node.js environment with an authenticated proxy and automatic redirects enabled are susceptible. The vulnerability arises when a request, initially sent through an authenticated proxy, is redirected to a target that no longer uses the proxy, potentially leaking `Proxy-Authorization` headers containing sensitive credentials to an untrusted remote server. This risk is heightened in deployments where applications interact with untrusted HTTP origins.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:163c0867091d50fae1acfc08b5631ada2be4a49c056adbee9a60166b97a88d5d_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:527644abdbe3cabab1f48223a1c0ee8048d7ced2b331c6b50cb0f08decfd6b4c_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:7072a730964e67001c15c156743e2726bb6dbaf7d8ee6338c337d94fafb079ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ab8453c70ec43c8782332d31f81758a47d79703bbfc06965947ab7d72404c374_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:12ce2d6283ac3fe295e53ac099b14222722fdcb9c549fbe2243ae83069f3cfa4_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:1b110d69b83fa0ed08e2cf38a981ad4fcadc8d01b0f9e4b1c0f4f93eba00df55_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c878bf475fb5ded36d666d59a5d1d7a15e4ec3ba0b54893cc09180e1af431db6_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cf2dbdd1c93fe967961000699880b74f2234de06335682f264dac8fdd96fef09_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "RHBZ#2487947",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487947"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44486",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44486"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc",
"url": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc"
}
],
"release_date": "2026-06-11T15:39:07.714000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T16:36:30+00:00",
"details": "See Kiali 2.4.19 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.0/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:163c0867091d50fae1acfc08b5631ada2be4a49c056adbee9a60166b97a88d5d_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:527644abdbe3cabab1f48223a1c0ee8048d7ced2b331c6b50cb0f08decfd6b4c_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:7072a730964e67001c15c156743e2726bb6dbaf7d8ee6338c337d94fafb079ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ab8453c70ec43c8782332d31f81758a47d79703bbfc06965947ab7d72404c374_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:12ce2d6283ac3fe295e53ac099b14222722fdcb9c549fbe2243ae83069f3cfa4_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:1b110d69b83fa0ed08e2cf38a981ad4fcadc8d01b0f9e4b1c0f4f93eba00df55_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c878bf475fb5ded36d666d59a5d1d7a15e4ec3ba0b54893cc09180e1af431db6_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cf2dbdd1c93fe967961000699880b74f2234de06335682f264dac8fdd96fef09_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33160"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:163c0867091d50fae1acfc08b5631ada2be4a49c056adbee9a60166b97a88d5d_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:527644abdbe3cabab1f48223a1c0ee8048d7ced2b331c6b50cb0f08decfd6b4c_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:7072a730964e67001c15c156743e2726bb6dbaf7d8ee6338c337d94fafb079ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ab8453c70ec43c8782332d31f81758a47d79703bbfc06965947ab7d72404c374_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:12ce2d6283ac3fe295e53ac099b14222722fdcb9c549fbe2243ae83069f3cfa4_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:1b110d69b83fa0ed08e2cf38a981ad4fcadc8d01b0f9e4b1c0f4f93eba00df55_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c878bf475fb5ded36d666d59a5d1d7a15e4ec3ba0b54893cc09180e1af431db6_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cf2dbdd1c93fe967961000699880b74f2234de06335682f264dac8fdd96fef09_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:163c0867091d50fae1acfc08b5631ada2be4a49c056adbee9a60166b97a88d5d_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:527644abdbe3cabab1f48223a1c0ee8048d7ced2b331c6b50cb0f08decfd6b4c_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:7072a730964e67001c15c156743e2726bb6dbaf7d8ee6338c337d94fafb079ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ab8453c70ec43c8782332d31f81758a47d79703bbfc06965947ab7d72404c374_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:12ce2d6283ac3fe295e53ac099b14222722fdcb9c549fbe2243ae83069f3cfa4_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:1b110d69b83fa0ed08e2cf38a981ad4fcadc8d01b0f9e4b1c0f4f93eba00df55_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c878bf475fb5ded36d666d59a5d1d7a15e4ec3ba0b54893cc09180e1af431db6_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cf2dbdd1c93fe967961000699880b74f2234de06335682f264dac8fdd96fef09_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects"
},
{
"cve": "CVE-2026-44487",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:34.091476+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487948"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via redirect flows",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in Axios affecting Node.js environments. When an application uses Axios with an authenticated HTTP proxy and follows redirects from an HTTP to a non-proxied HTTPS destination, the Proxy-Authorization header may be inadvertently sent to the final origin server. This could lead to the exposure of sensitive proxy credentials to an unintended third party.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:163c0867091d50fae1acfc08b5631ada2be4a49c056adbee9a60166b97a88d5d_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:527644abdbe3cabab1f48223a1c0ee8048d7ced2b331c6b50cb0f08decfd6b4c_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:7072a730964e67001c15c156743e2726bb6dbaf7d8ee6338c337d94fafb079ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ab8453c70ec43c8782332d31f81758a47d79703bbfc06965947ab7d72404c374_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:12ce2d6283ac3fe295e53ac099b14222722fdcb9c549fbe2243ae83069f3cfa4_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:1b110d69b83fa0ed08e2cf38a981ad4fcadc8d01b0f9e4b1c0f4f93eba00df55_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c878bf475fb5ded36d666d59a5d1d7a15e4ec3ba0b54893cc09180e1af431db6_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cf2dbdd1c93fe967961000699880b74f2234de06335682f264dac8fdd96fef09_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "RHBZ#2487948",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487948"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44487",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44487"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v",
"url": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v"
}
],
"release_date": "2026-06-11T15:38:25.150000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T16:36:30+00:00",
"details": "See Kiali 2.4.19 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.0/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:163c0867091d50fae1acfc08b5631ada2be4a49c056adbee9a60166b97a88d5d_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:527644abdbe3cabab1f48223a1c0ee8048d7ced2b331c6b50cb0f08decfd6b4c_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:7072a730964e67001c15c156743e2726bb6dbaf7d8ee6338c337d94fafb079ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ab8453c70ec43c8782332d31f81758a47d79703bbfc06965947ab7d72404c374_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:12ce2d6283ac3fe295e53ac099b14222722fdcb9c549fbe2243ae83069f3cfa4_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:1b110d69b83fa0ed08e2cf38a981ad4fcadc8d01b0f9e4b1c0f4f93eba00df55_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c878bf475fb5ded36d666d59a5d1d7a15e4ec3ba0b54893cc09180e1af431db6_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cf2dbdd1c93fe967961000699880b74f2234de06335682f264dac8fdd96fef09_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33160"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:163c0867091d50fae1acfc08b5631ada2be4a49c056adbee9a60166b97a88d5d_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:527644abdbe3cabab1f48223a1c0ee8048d7ced2b331c6b50cb0f08decfd6b4c_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:7072a730964e67001c15c156743e2726bb6dbaf7d8ee6338c337d94fafb079ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ab8453c70ec43c8782332d31f81758a47d79703bbfc06965947ab7d72404c374_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:12ce2d6283ac3fe295e53ac099b14222722fdcb9c549fbe2243ae83069f3cfa4_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:1b110d69b83fa0ed08e2cf38a981ad4fcadc8d01b0f9e4b1c0f4f93eba00df55_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c878bf475fb5ded36d666d59a5d1d7a15e4ec3ba0b54893cc09180e1af431db6_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cf2dbdd1c93fe967961000699880b74f2234de06335682f264dac8fdd96fef09_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:163c0867091d50fae1acfc08b5631ada2be4a49c056adbee9a60166b97a88d5d_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:527644abdbe3cabab1f48223a1c0ee8048d7ced2b331c6b50cb0f08decfd6b4c_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:7072a730964e67001c15c156743e2726bb6dbaf7d8ee6338c337d94fafb079ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ab8453c70ec43c8782332d31f81758a47d79703bbfc06965947ab7d72404c374_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:12ce2d6283ac3fe295e53ac099b14222722fdcb9c549fbe2243ae83069f3cfa4_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:1b110d69b83fa0ed08e2cf38a981ad4fcadc8d01b0f9e4b1c0f4f93eba00df55_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c878bf475fb5ded36d666d59a5d1d7a15e4ec3ba0b54893cc09180e1af431db6_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cf2dbdd1c93fe967961000699880b74f2234de06335682f264dac8fdd96fef09_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via redirect flows"
},
{
"cve": "CVE-2026-44488",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-11T17:01:36.836488+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487949"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Denial of Service due to unenforced request and response size limits",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A denial of service flaw was found in Axios, a JavaScript HTTP client library. This issue arises when applications utilize the `fetch` adapter, as configured request and response size limits are not properly enforced. A remote attacker could exploit this by sending or receiving excessively large data bodies, leading to resource exhaustion and potential denial of service in affected server-side applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:163c0867091d50fae1acfc08b5631ada2be4a49c056adbee9a60166b97a88d5d_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:527644abdbe3cabab1f48223a1c0ee8048d7ced2b331c6b50cb0f08decfd6b4c_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:7072a730964e67001c15c156743e2726bb6dbaf7d8ee6338c337d94fafb079ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ab8453c70ec43c8782332d31f81758a47d79703bbfc06965947ab7d72404c374_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:12ce2d6283ac3fe295e53ac099b14222722fdcb9c549fbe2243ae83069f3cfa4_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:1b110d69b83fa0ed08e2cf38a981ad4fcadc8d01b0f9e4b1c0f4f93eba00df55_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c878bf475fb5ded36d666d59a5d1d7a15e4ec3ba0b54893cc09180e1af431db6_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cf2dbdd1c93fe967961000699880b74f2234de06335682f264dac8fdd96fef09_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "RHBZ#2487949",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487949"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf"
}
],
"release_date": "2026-06-11T15:37:38.013000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T16:36:30+00:00",
"details": "See Kiali 2.4.19 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.0/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:163c0867091d50fae1acfc08b5631ada2be4a49c056adbee9a60166b97a88d5d_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:527644abdbe3cabab1f48223a1c0ee8048d7ced2b331c6b50cb0f08decfd6b4c_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:7072a730964e67001c15c156743e2726bb6dbaf7d8ee6338c337d94fafb079ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ab8453c70ec43c8782332d31f81758a47d79703bbfc06965947ab7d72404c374_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:12ce2d6283ac3fe295e53ac099b14222722fdcb9c549fbe2243ae83069f3cfa4_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:1b110d69b83fa0ed08e2cf38a981ad4fcadc8d01b0f9e4b1c0f4f93eba00df55_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c878bf475fb5ded36d666d59a5d1d7a15e4ec3ba0b54893cc09180e1af431db6_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cf2dbdd1c93fe967961000699880b74f2234de06335682f264dac8fdd96fef09_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33160"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:163c0867091d50fae1acfc08b5631ada2be4a49c056adbee9a60166b97a88d5d_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:527644abdbe3cabab1f48223a1c0ee8048d7ced2b331c6b50cb0f08decfd6b4c_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:7072a730964e67001c15c156743e2726bb6dbaf7d8ee6338c337d94fafb079ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ab8453c70ec43c8782332d31f81758a47d79703bbfc06965947ab7d72404c374_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:12ce2d6283ac3fe295e53ac099b14222722fdcb9c549fbe2243ae83069f3cfa4_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:1b110d69b83fa0ed08e2cf38a981ad4fcadc8d01b0f9e4b1c0f4f93eba00df55_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c878bf475fb5ded36d666d59a5d1d7a15e4ec3ba0b54893cc09180e1af431db6_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cf2dbdd1c93fe967961000699880b74f2234de06335682f264dac8fdd96fef09_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:163c0867091d50fae1acfc08b5631ada2be4a49c056adbee9a60166b97a88d5d_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:527644abdbe3cabab1f48223a1c0ee8048d7ced2b331c6b50cb0f08decfd6b4c_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:7072a730964e67001c15c156743e2726bb6dbaf7d8ee6338c337d94fafb079ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ab8453c70ec43c8782332d31f81758a47d79703bbfc06965947ab7d72404c374_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:12ce2d6283ac3fe295e53ac099b14222722fdcb9c549fbe2243ae83069f3cfa4_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:1b110d69b83fa0ed08e2cf38a981ad4fcadc8d01b0f9e4b1c0f4f93eba00df55_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c878bf475fb5ded36d666d59a5d1d7a15e4ec3ba0b54893cc09180e1af431db6_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cf2dbdd1c93fe967961000699880b74f2234de06335682f264dac8fdd96fef09_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Denial of Service due to unenforced request and response size limits"
},
{
"cve": "CVE-2026-44492",
"cwe": {
"id": "CWE-289",
"name": "Authentication Bypass by Alternate Name"
},
"discovery_date": "2026-06-11T17:00:56.761751+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487938"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Axios, a JavaScript HTTP client library, that allows for a proxy bypass. When a `NO_PROXY` environment variable is configured to prevent direct connections to specific IPv4 addresses, an attacker can craft a request URL using the IPv4-mapped IPv6 address format. This bypasses the intended `NO_PROXY` exclusion, routing the request through the configured proxy and potentially exposing internal services or sensitive information, such as cloud instance metadata credentials.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:163c0867091d50fae1acfc08b5631ada2be4a49c056adbee9a60166b97a88d5d_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:527644abdbe3cabab1f48223a1c0ee8048d7ced2b331c6b50cb0f08decfd6b4c_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:7072a730964e67001c15c156743e2726bb6dbaf7d8ee6338c337d94fafb079ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ab8453c70ec43c8782332d31f81758a47d79703bbfc06965947ab7d72404c374_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:12ce2d6283ac3fe295e53ac099b14222722fdcb9c549fbe2243ae83069f3cfa4_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:1b110d69b83fa0ed08e2cf38a981ad4fcadc8d01b0f9e4b1c0f4f93eba00df55_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c878bf475fb5ded36d666d59a5d1d7a15e4ec3ba0b54893cc09180e1af431db6_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cf2dbdd1c93fe967961000699880b74f2234de06335682f264dac8fdd96fef09_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "RHBZ#2487938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487938"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44492"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv",
"url": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv"
}
],
"release_date": "2026-06-11T15:29:13.890000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T16:36:30+00:00",
"details": "See Kiali 2.4.19 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.0/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:163c0867091d50fae1acfc08b5631ada2be4a49c056adbee9a60166b97a88d5d_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:527644abdbe3cabab1f48223a1c0ee8048d7ced2b331c6b50cb0f08decfd6b4c_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:7072a730964e67001c15c156743e2726bb6dbaf7d8ee6338c337d94fafb079ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ab8453c70ec43c8782332d31f81758a47d79703bbfc06965947ab7d72404c374_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:12ce2d6283ac3fe295e53ac099b14222722fdcb9c549fbe2243ae83069f3cfa4_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:1b110d69b83fa0ed08e2cf38a981ad4fcadc8d01b0f9e4b1c0f4f93eba00df55_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c878bf475fb5ded36d666d59a5d1d7a15e4ec3ba0b54893cc09180e1af431db6_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cf2dbdd1c93fe967961000699880b74f2234de06335682f264dac8fdd96fef09_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33160"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:163c0867091d50fae1acfc08b5631ada2be4a49c056adbee9a60166b97a88d5d_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:527644abdbe3cabab1f48223a1c0ee8048d7ced2b331c6b50cb0f08decfd6b4c_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:7072a730964e67001c15c156743e2726bb6dbaf7d8ee6338c337d94fafb079ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ab8453c70ec43c8782332d31f81758a47d79703bbfc06965947ab7d72404c374_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:12ce2d6283ac3fe295e53ac099b14222722fdcb9c549fbe2243ae83069f3cfa4_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:1b110d69b83fa0ed08e2cf38a981ad4fcadc8d01b0f9e4b1c0f4f93eba00df55_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c878bf475fb5ded36d666d59a5d1d7a15e4ec3ba0b54893cc09180e1af431db6_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cf2dbdd1c93fe967961000699880b74f2234de06335682f264dac8fdd96fef09_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:163c0867091d50fae1acfc08b5631ada2be4a49c056adbee9a60166b97a88d5d_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:527644abdbe3cabab1f48223a1c0ee8048d7ced2b331c6b50cb0f08decfd6b4c_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:7072a730964e67001c15c156743e2726bb6dbaf7d8ee6338c337d94fafb079ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ab8453c70ec43c8782332d31f81758a47d79703bbfc06965947ab7d72404c374_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:12ce2d6283ac3fe295e53ac099b14222722fdcb9c549fbe2243ae83069f3cfa4_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:1b110d69b83fa0ed08e2cf38a981ad4fcadc8d01b0f9e4b1c0f4f93eba00df55_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c878bf475fb5ded36d666d59a5d1d7a15e4ec3ba0b54893cc09180e1af431db6_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cf2dbdd1c93fe967961000699880b74f2234de06335682f264dac8fdd96fef09_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization"
},
{
"cve": "CVE-2026-44494",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:01:12.945664+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487942"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. This vulnerability, a Prototype Pollution \"Gadget\" attack, allows an attacker to escalate any existing Object.prototype pollution in an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the Axios library allows an attacker to escalate existing prototype pollution vulnerabilities within an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. By injecting a malicious proxy configuration into the `Object.prototype`, an attacker can intercept, read, and modify all HTTP traffic, including sensitive authentication credentials, without direct user interaction. This poses a significant risk to data confidentiality and integrity in Red Hat products that utilize the Axios library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:163c0867091d50fae1acfc08b5631ada2be4a49c056adbee9a60166b97a88d5d_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:527644abdbe3cabab1f48223a1c0ee8048d7ced2b331c6b50cb0f08decfd6b4c_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:7072a730964e67001c15c156743e2726bb6dbaf7d8ee6338c337d94fafb079ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ab8453c70ec43c8782332d31f81758a47d79703bbfc06965947ab7d72404c374_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:12ce2d6283ac3fe295e53ac099b14222722fdcb9c549fbe2243ae83069f3cfa4_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:1b110d69b83fa0ed08e2cf38a981ad4fcadc8d01b0f9e4b1c0f4f93eba00df55_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c878bf475fb5ded36d666d59a5d1d7a15e4ec3ba0b54893cc09180e1af431db6_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cf2dbdd1c93fe967961000699880b74f2234de06335682f264dac8fdd96fef09_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "RHBZ#2487942",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487942"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44494",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44494"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh",
"url": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh"
}
],
"release_date": "2026-06-11T15:32:03.155000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T16:36:30+00:00",
"details": "See Kiali 2.4.19 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.0/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:163c0867091d50fae1acfc08b5631ada2be4a49c056adbee9a60166b97a88d5d_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:527644abdbe3cabab1f48223a1c0ee8048d7ced2b331c6b50cb0f08decfd6b4c_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:7072a730964e67001c15c156743e2726bb6dbaf7d8ee6338c337d94fafb079ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ab8453c70ec43c8782332d31f81758a47d79703bbfc06965947ab7d72404c374_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:12ce2d6283ac3fe295e53ac099b14222722fdcb9c549fbe2243ae83069f3cfa4_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:1b110d69b83fa0ed08e2cf38a981ad4fcadc8d01b0f9e4b1c0f4f93eba00df55_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c878bf475fb5ded36d666d59a5d1d7a15e4ec3ba0b54893cc09180e1af431db6_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cf2dbdd1c93fe967961000699880b74f2234de06335682f264dac8fdd96fef09_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33160"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:163c0867091d50fae1acfc08b5631ada2be4a49c056adbee9a60166b97a88d5d_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:527644abdbe3cabab1f48223a1c0ee8048d7ced2b331c6b50cb0f08decfd6b4c_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:7072a730964e67001c15c156743e2726bb6dbaf7d8ee6338c337d94fafb079ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ab8453c70ec43c8782332d31f81758a47d79703bbfc06965947ab7d72404c374_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:12ce2d6283ac3fe295e53ac099b14222722fdcb9c549fbe2243ae83069f3cfa4_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:1b110d69b83fa0ed08e2cf38a981ad4fcadc8d01b0f9e4b1c0f4f93eba00df55_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c878bf475fb5ded36d666d59a5d1d7a15e4ec3ba0b54893cc09180e1af431db6_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cf2dbdd1c93fe967961000699880b74f2234de06335682f264dac8fdd96fef09_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:163c0867091d50fae1acfc08b5631ada2be4a49c056adbee9a60166b97a88d5d_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:527644abdbe3cabab1f48223a1c0ee8048d7ced2b331c6b50cb0f08decfd6b4c_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:7072a730964e67001c15c156743e2726bb6dbaf7d8ee6338c337d94fafb079ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ab8453c70ec43c8782332d31f81758a47d79703bbfc06965947ab7d72404c374_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:12ce2d6283ac3fe295e53ac099b14222722fdcb9c549fbe2243ae83069f3cfa4_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:1b110d69b83fa0ed08e2cf38a981ad4fcadc8d01b0f9e4b1c0f4f93eba00df55_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c878bf475fb5ded36d666d59a5d1d7a15e4ec3ba0b54893cc09180e1af431db6_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cf2dbdd1c93fe967961000699880b74f2234de06335682f264dac8fdd96fef09_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution"
},
{
"cve": "CVE-2026-44495",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:00:53.999811+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487937"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure due to prototype pollution vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Axios, a promise-based HTTP client, can lead to information disclosure, including credential theft and response hijacking, or denial of service. Exploitation requires a separate prototype pollution vulnerability in the same JavaScript process, allowing an attacker to control `Object.prototype.transformResponse`. Red Hat products using affected Axios versions are at risk if another component introduces such pollution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:163c0867091d50fae1acfc08b5631ada2be4a49c056adbee9a60166b97a88d5d_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:527644abdbe3cabab1f48223a1c0ee8048d7ced2b331c6b50cb0f08decfd6b4c_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:7072a730964e67001c15c156743e2726bb6dbaf7d8ee6338c337d94fafb079ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ab8453c70ec43c8782332d31f81758a47d79703bbfc06965947ab7d72404c374_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:12ce2d6283ac3fe295e53ac099b14222722fdcb9c549fbe2243ae83069f3cfa4_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:1b110d69b83fa0ed08e2cf38a981ad4fcadc8d01b0f9e4b1c0f4f93eba00df55_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c878bf475fb5ded36d666d59a5d1d7a15e4ec3ba0b54893cc09180e1af431db6_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cf2dbdd1c93fe967961000699880b74f2234de06335682f264dac8fdd96fef09_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "RHBZ#2487937",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487937"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44495",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw"
}
],
"release_date": "2026-06-11T15:33:12.433000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T16:36:30+00:00",
"details": "See Kiali 2.4.19 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.0/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:163c0867091d50fae1acfc08b5631ada2be4a49c056adbee9a60166b97a88d5d_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:527644abdbe3cabab1f48223a1c0ee8048d7ced2b331c6b50cb0f08decfd6b4c_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:7072a730964e67001c15c156743e2726bb6dbaf7d8ee6338c337d94fafb079ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ab8453c70ec43c8782332d31f81758a47d79703bbfc06965947ab7d72404c374_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:12ce2d6283ac3fe295e53ac099b14222722fdcb9c549fbe2243ae83069f3cfa4_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:1b110d69b83fa0ed08e2cf38a981ad4fcadc8d01b0f9e4b1c0f4f93eba00df55_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c878bf475fb5ded36d666d59a5d1d7a15e4ec3ba0b54893cc09180e1af431db6_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cf2dbdd1c93fe967961000699880b74f2234de06335682f264dac8fdd96fef09_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33160"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:163c0867091d50fae1acfc08b5631ada2be4a49c056adbee9a60166b97a88d5d_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:527644abdbe3cabab1f48223a1c0ee8048d7ced2b331c6b50cb0f08decfd6b4c_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:7072a730964e67001c15c156743e2726bb6dbaf7d8ee6338c337d94fafb079ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ab8453c70ec43c8782332d31f81758a47d79703bbfc06965947ab7d72404c374_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:12ce2d6283ac3fe295e53ac099b14222722fdcb9c549fbe2243ae83069f3cfa4_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:1b110d69b83fa0ed08e2cf38a981ad4fcadc8d01b0f9e4b1c0f4f93eba00df55_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c878bf475fb5ded36d666d59a5d1d7a15e4ec3ba0b54893cc09180e1af431db6_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cf2dbdd1c93fe967961000699880b74f2234de06335682f264dac8fdd96fef09_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:163c0867091d50fae1acfc08b5631ada2be4a49c056adbee9a60166b97a88d5d_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:527644abdbe3cabab1f48223a1c0ee8048d7ced2b331c6b50cb0f08decfd6b4c_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:7072a730964e67001c15c156743e2726bb6dbaf7d8ee6338c337d94fafb079ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ab8453c70ec43c8782332d31f81758a47d79703bbfc06965947ab7d72404c374_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:12ce2d6283ac3fe295e53ac099b14222722fdcb9c549fbe2243ae83069f3cfa4_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:1b110d69b83fa0ed08e2cf38a981ad4fcadc8d01b0f9e4b1c0f4f93eba00df55_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c878bf475fb5ded36d666d59a5d1d7a15e4ec3ba0b54893cc09180e1af431db6_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cf2dbdd1c93fe967961000699880b74f2234de06335682f264dac8fdd96fef09_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure due to prototype pollution vulnerability"
},
{
"cve": "CVE-2026-44496",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-06-11T17:01:15.856386+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487943"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in Axios can lead to a client-side Denial of Service. An attacker capable of influencing the XSRF cookie name within a browser environment could trigger excessive regular expression processing, causing the affected browser tab to freeze and degrade user availability. This issue specifically impacts browser-based applications and does not affect Node.js HTTP adapter usage, React Native, or web workers.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:163c0867091d50fae1acfc08b5631ada2be4a49c056adbee9a60166b97a88d5d_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:527644abdbe3cabab1f48223a1c0ee8048d7ced2b331c6b50cb0f08decfd6b4c_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:7072a730964e67001c15c156743e2726bb6dbaf7d8ee6338c337d94fafb079ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ab8453c70ec43c8782332d31f81758a47d79703bbfc06965947ab7d72404c374_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:12ce2d6283ac3fe295e53ac099b14222722fdcb9c549fbe2243ae83069f3cfa4_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:1b110d69b83fa0ed08e2cf38a981ad4fcadc8d01b0f9e4b1c0f4f93eba00df55_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c878bf475fb5ded36d666d59a5d1d7a15e4ec3ba0b54893cc09180e1af431db6_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cf2dbdd1c93fe967961000699880b74f2234de06335682f264dac8fdd96fef09_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "RHBZ#2487943",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487943"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44496",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44496"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf"
}
],
"release_date": "2026-06-11T15:34:28.492000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T16:36:30+00:00",
"details": "See Kiali 2.4.19 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.0/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:163c0867091d50fae1acfc08b5631ada2be4a49c056adbee9a60166b97a88d5d_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:527644abdbe3cabab1f48223a1c0ee8048d7ced2b331c6b50cb0f08decfd6b4c_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:7072a730964e67001c15c156743e2726bb6dbaf7d8ee6338c337d94fafb079ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ab8453c70ec43c8782332d31f81758a47d79703bbfc06965947ab7d72404c374_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:12ce2d6283ac3fe295e53ac099b14222722fdcb9c549fbe2243ae83069f3cfa4_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:1b110d69b83fa0ed08e2cf38a981ad4fcadc8d01b0f9e4b1c0f4f93eba00df55_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c878bf475fb5ded36d666d59a5d1d7a15e4ec3ba0b54893cc09180e1af431db6_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cf2dbdd1c93fe967961000699880b74f2234de06335682f264dac8fdd96fef09_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33160"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:163c0867091d50fae1acfc08b5631ada2be4a49c056adbee9a60166b97a88d5d_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:527644abdbe3cabab1f48223a1c0ee8048d7ced2b331c6b50cb0f08decfd6b4c_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:7072a730964e67001c15c156743e2726bb6dbaf7d8ee6338c337d94fafb079ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ab8453c70ec43c8782332d31f81758a47d79703bbfc06965947ab7d72404c374_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:12ce2d6283ac3fe295e53ac099b14222722fdcb9c549fbe2243ae83069f3cfa4_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:1b110d69b83fa0ed08e2cf38a981ad4fcadc8d01b0f9e4b1c0f4f93eba00df55_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c878bf475fb5ded36d666d59a5d1d7a15e4ec3ba0b54893cc09180e1af431db6_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cf2dbdd1c93fe967961000699880b74f2234de06335682f264dac8fdd96fef09_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:163c0867091d50fae1acfc08b5631ada2be4a49c056adbee9a60166b97a88d5d_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:527644abdbe3cabab1f48223a1c0ee8048d7ced2b331c6b50cb0f08decfd6b4c_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:7072a730964e67001c15c156743e2726bb6dbaf7d8ee6338c337d94fafb079ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ab8453c70ec43c8782332d31f81758a47d79703bbfc06965947ab7d72404c374_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:12ce2d6283ac3fe295e53ac099b14222722fdcb9c549fbe2243ae83069f3cfa4_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:1b110d69b83fa0ed08e2cf38a981ad4fcadc8d01b0f9e4b1c0f4f93eba00df55_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c878bf475fb5ded36d666d59a5d1d7a15e4ec3ba0b54893cc09180e1af431db6_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cf2dbdd1c93fe967961000699880b74f2234de06335682f264dac8fdd96fef09_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name"
},
{
"cve": "CVE-2026-48779",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-16T22:01:24.571224+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2489661"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that consume excessive memory. Consequently, this leads to process termination and a denial of service (DoS) for the remote peer.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `ws` WebSocket library. A remote attacker can exploit this flaw by sending a high volume of small, fragmented data, leading to excessive memory consumption and subsequent process termination. This can result in service disruption for Red Hat products that utilize `ws` for WebSocket communication.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:163c0867091d50fae1acfc08b5631ada2be4a49c056adbee9a60166b97a88d5d_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:527644abdbe3cabab1f48223a1c0ee8048d7ced2b331c6b50cb0f08decfd6b4c_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:7072a730964e67001c15c156743e2726bb6dbaf7d8ee6338c337d94fafb079ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ab8453c70ec43c8782332d31f81758a47d79703bbfc06965947ab7d72404c374_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:12ce2d6283ac3fe295e53ac099b14222722fdcb9c549fbe2243ae83069f3cfa4_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:1b110d69b83fa0ed08e2cf38a981ad4fcadc8d01b0f9e4b1c0f4f93eba00df55_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c878bf475fb5ded36d666d59a5d1d7a15e4ec3ba0b54893cc09180e1af431db6_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cf2dbdd1c93fe967961000699880b74f2234de06335682f264dac8fdd96fef09_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48779"
},
{
"category": "external",
"summary": "RHBZ#2489661",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489661"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48779",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48779"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48779",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48779"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7",
"url": "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53",
"url": "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94",
"url": "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8",
"url": "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p",
"url": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p"
}
],
"release_date": "2026-06-16T21:26:22.537000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T16:36:30+00:00",
"details": "See Kiali 2.4.19 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.0/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:163c0867091d50fae1acfc08b5631ada2be4a49c056adbee9a60166b97a88d5d_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:527644abdbe3cabab1f48223a1c0ee8048d7ced2b331c6b50cb0f08decfd6b4c_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:7072a730964e67001c15c156743e2726bb6dbaf7d8ee6338c337d94fafb079ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ab8453c70ec43c8782332d31f81758a47d79703bbfc06965947ab7d72404c374_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:12ce2d6283ac3fe295e53ac099b14222722fdcb9c549fbe2243ae83069f3cfa4_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:1b110d69b83fa0ed08e2cf38a981ad4fcadc8d01b0f9e4b1c0f4f93eba00df55_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c878bf475fb5ded36d666d59a5d1d7a15e4ec3ba0b54893cc09180e1af431db6_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cf2dbdd1c93fe967961000699880b74f2234de06335682f264dac8fdd96fef09_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33160"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:163c0867091d50fae1acfc08b5631ada2be4a49c056adbee9a60166b97a88d5d_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:527644abdbe3cabab1f48223a1c0ee8048d7ced2b331c6b50cb0f08decfd6b4c_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:7072a730964e67001c15c156743e2726bb6dbaf7d8ee6338c337d94fafb079ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ab8453c70ec43c8782332d31f81758a47d79703bbfc06965947ab7d72404c374_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:12ce2d6283ac3fe295e53ac099b14222722fdcb9c549fbe2243ae83069f3cfa4_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:1b110d69b83fa0ed08e2cf38a981ad4fcadc8d01b0f9e4b1c0f4f93eba00df55_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c878bf475fb5ded36d666d59a5d1d7a15e4ec3ba0b54893cc09180e1af431db6_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cf2dbdd1c93fe967961000699880b74f2234de06335682f264dac8fdd96fef09_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:163c0867091d50fae1acfc08b5631ada2be4a49c056adbee9a60166b97a88d5d_arm64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:527644abdbe3cabab1f48223a1c0ee8048d7ced2b331c6b50cb0f08decfd6b4c_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:7072a730964e67001c15c156743e2726bb6dbaf7d8ee6338c337d94fafb079ed_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ab8453c70ec43c8782332d31f81758a47d79703bbfc06965947ab7d72404c374_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:12ce2d6283ac3fe295e53ac099b14222722fdcb9c549fbe2243ae83069f3cfa4_amd64",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:1b110d69b83fa0ed08e2cf38a981ad4fcadc8d01b0f9e4b1c0f4f93eba00df55_ppc64le",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c878bf475fb5ded36d666d59a5d1d7a15e4ec3ba0b54893cc09180e1af431db6_s390x",
"Red Hat OpenShift Service Mesh 3.0:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:cf2dbdd1c93fe967961000699880b74f2234de06335682f264dac8fdd96fef09_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments"
}
]
}
RHSA-2026:33163
Vulnerability from csaf_redhat - Published: 2026-06-29 16:41 - Updated: 2026-08-10 09:21Summary
Red Hat Security Advisory: Kiali 2.11.13 for Red Hat OpenShift Service Mesh 3.1
Severity
Important
Notes
Topic: Kiali 2.11.13 for Red Hat OpenShift Service Mesh 3.1 is now available.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Kiali 2.11.13, for Red Hat OpenShift Service Mesh 3.1, provides observability for the service mesh by offering a visual representation of the mesh topology and metrics, helping users monitor, trace, and manage efficiently.
Security Fix(es):
* CVE-2026-42338 openshift-service-mesh/kiali-ossmc-rhel9: ip-address: Cross-site scripting via improper HTML escaping of untrusted input (OSSM-14063)
* CVE-2026-42338 openshift-service-mesh/kiali-rhel9: ip-address: Cross-site scripting via improper HTML escaping of untrusted input (OSSM-14068)
* CVE-2026-39821 openshift-service-mesh/kiali-rhel9: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (OSSM-14070)
* CVE-2026-44495 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Information disclosure due to prototype pollution vulnerability (OSSM-14144)
* CVE-2026-44495 openshift-service-mesh/kiali-rhel9: Axios: Information disclosure due to prototype pollution vulnerability (OSSM-14149)
* CVE-2026-44488 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Denial of Service due to unenforced request and response size limits (OSSM-14157)
* CVE-2026-44488 openshift-service-mesh/kiali-rhel9: Axios: Denial of Service due to unenforced request and response size limits (OSSM-14162)
* CVE-2026-44487 openshift-service-mesh/kiali-rhel9: Axios: Information disclosure of proxy credentials via redirect flows (OSSM-14166)
* CVE-2026-44487 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Information disclosure of proxy credentials via redirect flows (OSSM-14173)
* CVE-2026-44494 openshift-service-mesh/kiali-rhel9: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution (OSSM-14222)
* CVE-2026-44494 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution (OSSM-14171)
* CVE-2026-44496 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name (OSSM-14213)
* CVE-2026-44496 openshift-service-mesh/kiali-rhel9: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name (OSSM-14185)
* CVE-2026-44486 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Information disclosure of proxy credentials via HTTP redirects (OSSM-14200)
* CVE-2026-44486 openshift-service-mesh/kiali-rhel9: Axios: Information disclosure of proxy credentials via HTTP redirects (OSSM-14188)
* CVE-2026-44492 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization (OSSM-14227)
* CVE-2026-44492 openshift-service-mesh/kiali-rhel9: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization (OSSM-14230)
* CVE-2026-48779 openshift-service-mesh/kiali-rhel9: ws: Denial of Service via memory exhaustion from small WebSocket fragments (OSSM-14311)
* CVE-2026-48779 openshift-service-mesh/kiali-ossmc-rhel9: ws: Denial of Service via memory exhaustion from small WebSocket fragments (OSSM-14314)
* CVE-2026-12143 openshift-service-mesh/kiali-ossmc-rhel9: form-data: Form field override via CRLF injection (OSSM-14333)
* CVE-2026-12143 openshift-service-mesh/kiali-rhel9: form-data: Form field override via CRLF injection (OSSM-14330)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:1c422bbe4c19201f0a63dd8175ae962208cbffccf096912858e6274b214994af_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:853f2430db6aceeb634f4c2059947d22547e39978c1185dc48ba3be4f7d337b6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cd49f834dca7cc30e12add0fb3247d82981f722d353fc15523ad247df8e6d25c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf353c0b22a951c13996d5227406ed75923bf6dbaed9ea50892f32d664003c8d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:99e5e5ef3be5b42ef54d1fbcceac268c670c05a47c3e982c1088d010499c9ae8_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:9ac5ee0b1ffc79c320478d77a24d62789eb7162a564dc0e2be3c0a2ae2ffb272_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c5926bbd0cb2414e4fd0117e11ccec6d33924c2ea255ca7f500419c7886807cf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ca9d114cccf1e213f392c73a4f36af7efef15bc016636d27fc5c736a933cda14_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:99e5e5ef3be5b42ef54d1fbcceac268c670c05a47c3e982c1088d010499c9ae8_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:9ac5ee0b1ffc79c320478d77a24d62789eb7162a564dc0e2be3c0a2ae2ffb272_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c5926bbd0cb2414e4fd0117e11ccec6d33924c2ea255ca7f500419c7886807cf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ca9d114cccf1e213f392c73a4f36af7efef15bc016636d27fc5c736a933cda14_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:1c422bbe4c19201f0a63dd8175ae962208cbffccf096912858e6274b214994af_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:853f2430db6aceeb634f4c2059947d22547e39978c1185dc48ba3be4f7d337b6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cd49f834dca7cc30e12add0fb3247d82981f722d353fc15523ad247df8e6d25c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf353c0b22a951c13996d5227406ed75923bf6dbaed9ea50892f32d664003c8d_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in ip-address, a JavaScript library for parsing and manipulating IPv4 and IPv6 addresses. This vulnerability allows a remote attacker to perform cross-site scripting (XSS) by providing untrusted input to the Address6 constructor. When an application renders the output of Address6.group(), Address6.link(), or the AddressError.parseMessage as HTML without proper escaping, the attacker-controlled content can be executed in the user's browser.
8.1 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:1c422bbe4c19201f0a63dd8175ae962208cbffccf096912858e6274b214994af_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:853f2430db6aceeb634f4c2059947d22547e39978c1185dc48ba3be4f7d337b6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cd49f834dca7cc30e12add0fb3247d82981f722d353fc15523ad247df8e6d25c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf353c0b22a951c13996d5227406ed75923bf6dbaed9ea50892f32d664003c8d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:99e5e5ef3be5b42ef54d1fbcceac268c670c05a47c3e982c1088d010499c9ae8_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:9ac5ee0b1ffc79c320478d77a24d62789eb7162a564dc0e2be3c0a2ae2ffb272_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c5926bbd0cb2414e4fd0117e11ccec6d33924c2ea255ca7f500419c7886807cf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ca9d114cccf1e213f392c73a4f36af7efef15bc016636d27fc5c736a933cda14_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:1c422bbe4c19201f0a63dd8175ae962208cbffccf096912858e6274b214994af_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:853f2430db6aceeb634f4c2059947d22547e39978c1185dc48ba3be4f7d337b6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cd49f834dca7cc30e12add0fb3247d82981f722d353fc15523ad247df8e6d25c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf353c0b22a951c13996d5227406ed75923bf6dbaed9ea50892f32d664003c8d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:99e5e5ef3be5b42ef54d1fbcceac268c670c05a47c3e982c1088d010499c9ae8_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:9ac5ee0b1ffc79c320478d77a24d62789eb7162a564dc0e2be3c0a2ae2ffb272_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c5926bbd0cb2414e4fd0117e11ccec6d33924c2ea255ca7f500419c7886807cf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ca9d114cccf1e213f392c73a4f36af7efef15bc016636d27fc5c736a933cda14_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:1c422bbe4c19201f0a63dd8175ae962208cbffccf096912858e6274b214994af_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:853f2430db6aceeb634f4c2059947d22547e39978c1185dc48ba3be4f7d337b6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cd49f834dca7cc30e12add0fb3247d82981f722d353fc15523ad247df8e6d25c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf353c0b22a951c13996d5227406ed75923bf6dbaed9ea50892f32d664003c8d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:99e5e5ef3be5b42ef54d1fbcceac268c670c05a47c3e982c1088d010499c9ae8_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:9ac5ee0b1ffc79c320478d77a24d62789eb7162a564dc0e2be3c0a2ae2ffb272_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c5926bbd0cb2414e4fd0117e11ccec6d33924c2ea255ca7f500419c7886807cf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ca9d114cccf1e213f392c73a4f36af7efef15bc016636d27fc5c736a933cda14_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:1c422bbe4c19201f0a63dd8175ae962208cbffccf096912858e6274b214994af_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:853f2430db6aceeb634f4c2059947d22547e39978c1185dc48ba3be4f7d337b6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cd49f834dca7cc30e12add0fb3247d82981f722d353fc15523ad247df8e6d25c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf353c0b22a951c13996d5227406ed75923bf6dbaed9ea50892f32d664003c8d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:99e5e5ef3be5b42ef54d1fbcceac268c670c05a47c3e982c1088d010499c9ae8_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:9ac5ee0b1ffc79c320478d77a24d62789eb7162a564dc0e2be3c0a2ae2ffb272_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c5926bbd0cb2414e4fd0117e11ccec6d33924c2ea255ca7f500419c7886807cf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ca9d114cccf1e213f392c73a4f36af7efef15bc016636d27fc5c736a933cda14_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.
8.6 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:1c422bbe4c19201f0a63dd8175ae962208cbffccf096912858e6274b214994af_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:853f2430db6aceeb634f4c2059947d22547e39978c1185dc48ba3be4f7d337b6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cd49f834dca7cc30e12add0fb3247d82981f722d353fc15523ad247df8e6d25c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf353c0b22a951c13996d5227406ed75923bf6dbaed9ea50892f32d664003c8d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:99e5e5ef3be5b42ef54d1fbcceac268c670c05a47c3e982c1088d010499c9ae8_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:9ac5ee0b1ffc79c320478d77a24d62789eb7162a564dc0e2be3c0a2ae2ffb272_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c5926bbd0cb2414e4fd0117e11ccec6d33924c2ea255ca7f500419c7886807cf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ca9d114cccf1e213f392c73a4f36af7efef15bc016636d27fc5c736a933cda14_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. This vulnerability, a Prototype Pollution "Gadget" attack, allows an attacker to escalate any existing Object.prototype pollution in an application's dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.
8.7 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:1c422bbe4c19201f0a63dd8175ae962208cbffccf096912858e6274b214994af_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:853f2430db6aceeb634f4c2059947d22547e39978c1185dc48ba3be4f7d337b6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cd49f834dca7cc30e12add0fb3247d82981f722d353fc15523ad247df8e6d25c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf353c0b22a951c13996d5227406ed75923bf6dbaed9ea50892f32d664003c8d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:99e5e5ef3be5b42ef54d1fbcceac268c670c05a47c3e982c1088d010499c9ae8_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:9ac5ee0b1ffc79c320478d77a24d62789eb7162a564dc0e2be3c0a2ae2ffb272_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c5926bbd0cb2414e4fd0117e11ccec6d33924c2ea255ca7f500419c7886807cf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ca9d114cccf1e213f392c73a4f36af7efef15bc016636d27fc5c736a933cda14_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.
7.0 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:1c422bbe4c19201f0a63dd8175ae962208cbffccf096912858e6274b214994af_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:853f2430db6aceeb634f4c2059947d22547e39978c1185dc48ba3be4f7d337b6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cd49f834dca7cc30e12add0fb3247d82981f722d353fc15523ad247df8e6d25c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf353c0b22a951c13996d5227406ed75923bf6dbaed9ea50892f32d664003c8d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:99e5e5ef3be5b42ef54d1fbcceac268c670c05a47c3e982c1088d010499c9ae8_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:9ac5ee0b1ffc79c320478d77a24d62789eb7162a564dc0e2be3c0a2ae2ffb272_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c5926bbd0cb2414e4fd0117e11ccec6d33924c2ea255ca7f500419c7886807cf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ca9d114cccf1e213f392c73a4f36af7efef15bc016636d27fc5c736a933cda14_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:1c422bbe4c19201f0a63dd8175ae962208cbffccf096912858e6274b214994af_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:853f2430db6aceeb634f4c2059947d22547e39978c1185dc48ba3be4f7d337b6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cd49f834dca7cc30e12add0fb3247d82981f722d353fc15523ad247df8e6d25c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf353c0b22a951c13996d5227406ed75923bf6dbaed9ea50892f32d664003c8d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:99e5e5ef3be5b42ef54d1fbcceac268c670c05a47c3e982c1088d010499c9ae8_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:9ac5ee0b1ffc79c320478d77a24d62789eb7162a564dc0e2be3c0a2ae2ffb272_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c5926bbd0cb2414e4fd0117e11ccec6d33924c2ea255ca7f500419c7886807cf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ca9d114cccf1e213f392c73a4f36af7efef15bc016636d27fc5c736a933cda14_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that consume excessive memory. Consequently, this leads to process termination and a denial of service (DoS) for the remote peer.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:1c422bbe4c19201f0a63dd8175ae962208cbffccf096912858e6274b214994af_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:853f2430db6aceeb634f4c2059947d22547e39978c1185dc48ba3be4f7d337b6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cd49f834dca7cc30e12add0fb3247d82981f722d353fc15523ad247df8e6d25c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf353c0b22a951c13996d5227406ed75923bf6dbaed9ea50892f32d664003c8d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:99e5e5ef3be5b42ef54d1fbcceac268c670c05a47c3e982c1088d010499c9ae8_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:9ac5ee0b1ffc79c320478d77a24d62789eb7162a564dc0e2be3c0a2ae2ffb272_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c5926bbd0cb2414e4fd0117e11ccec6d33924c2ea255ca7f500419c7886807cf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ca9d114cccf1e213f392c73a4f36af7efef15bc016636d27fc5c736a933cda14_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
83 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Kiali 2.11.13 for Red Hat OpenShift Service Mesh 3.1 is now available.\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Kiali 2.11.13, for Red Hat OpenShift Service Mesh 3.1, provides observability for the service mesh by offering a visual representation of the mesh topology and metrics, helping users monitor, trace, and manage efficiently.\n\nSecurity Fix(es):\n\n* CVE-2026-42338 openshift-service-mesh/kiali-ossmc-rhel9: ip-address: Cross-site scripting via improper HTML escaping of untrusted input (OSSM-14063)\n* CVE-2026-42338 openshift-service-mesh/kiali-rhel9: ip-address: Cross-site scripting via improper HTML escaping of untrusted input (OSSM-14068)\n* CVE-2026-39821 openshift-service-mesh/kiali-rhel9: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (OSSM-14070)\n* CVE-2026-44495 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Information disclosure due to prototype pollution vulnerability (OSSM-14144)\n* CVE-2026-44495 openshift-service-mesh/kiali-rhel9: Axios: Information disclosure due to prototype pollution vulnerability (OSSM-14149)\n* CVE-2026-44488 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Denial of Service due to unenforced request and response size limits (OSSM-14157)\n* CVE-2026-44488 openshift-service-mesh/kiali-rhel9: Axios: Denial of Service due to unenforced request and response size limits (OSSM-14162)\n* CVE-2026-44487 openshift-service-mesh/kiali-rhel9: Axios: Information disclosure of proxy credentials via redirect flows (OSSM-14166)\n* CVE-2026-44487 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Information disclosure of proxy credentials via redirect flows (OSSM-14173)\n* CVE-2026-44494 openshift-service-mesh/kiali-rhel9: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution (OSSM-14222)\n* CVE-2026-44494 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution (OSSM-14171)\n* CVE-2026-44496 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name (OSSM-14213)\n* CVE-2026-44496 openshift-service-mesh/kiali-rhel9: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name (OSSM-14185)\n* CVE-2026-44486 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Information disclosure of proxy credentials via HTTP redirects (OSSM-14200)\n* CVE-2026-44486 openshift-service-mesh/kiali-rhel9: Axios: Information disclosure of proxy credentials via HTTP redirects (OSSM-14188)\n* CVE-2026-44492 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization (OSSM-14227)\n* CVE-2026-44492 openshift-service-mesh/kiali-rhel9: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization (OSSM-14230)\n* CVE-2026-48779 openshift-service-mesh/kiali-rhel9: ws: Denial of Service via memory exhaustion from small WebSocket fragments (OSSM-14311)\n* CVE-2026-48779 openshift-service-mesh/kiali-ossmc-rhel9: ws: Denial of Service via memory exhaustion from small WebSocket fragments (OSSM-14314)\n* CVE-2026-12143 openshift-service-mesh/kiali-ossmc-rhel9: form-data: Form field override via CRLF injection (OSSM-14333)\n* CVE-2026-12143 openshift-service-mesh/kiali-rhel9: form-data: Form field override via CRLF injection (OSSM-14330)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:33163",
"url": "https://access.redhat.com/errata/RHSA-2026:33163"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-12143",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42338",
"url": "https://access.redhat.com/security/cve/CVE-2026-42338"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44486",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44487",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44488",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44492",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44494",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44495",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44496",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-48779",
"url": "https://access.redhat.com/security/cve/CVE-2026-48779"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification",
"url": "https://access.redhat.com/security/updates/classification"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_33163.json"
}
],
"title": "Red Hat Security Advisory: Kiali 2.11.13 for Red Hat OpenShift Service Mesh 3.1",
"tracking": {
"current_release_date": "2026-08-10T09:21:09+00:00",
"generator": {
"date": "2026-08-10T09:21:09+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.12"
}
},
"id": "RHSA-2026:33163",
"initial_release_date": "2026-06-29T16:41:59+00:00",
"revision_history": [
{
"date": "2026-06-29T16:41:59+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-08T04:36:23+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-10T09:21:09+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Service Mesh 3.1",
"product": {
"name": "Red Hat OpenShift Service Mesh 3.1",
"product_id": "Red Hat OpenShift Service Mesh 3.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:service_mesh:3.1::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Service Mesh"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c5926bbd0cb2414e4fd0117e11ccec6d33924c2ea255ca7f500419c7886807cf_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c5926bbd0cb2414e4fd0117e11ccec6d33924c2ea255ca7f500419c7886807cf_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c5926bbd0cb2414e4fd0117e11ccec6d33924c2ea255ca7f500419c7886807cf_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9@sha256%3Ac5926bbd0cb2414e4fd0117e11ccec6d33924c2ea255ca7f500419c7886807cf?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-rhel9\u0026tag=1782201537"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:853f2430db6aceeb634f4c2059947d22547e39978c1185dc48ba3be4f7d337b6_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:853f2430db6aceeb634f4c2059947d22547e39978c1185dc48ba3be4f7d337b6_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:853f2430db6aceeb634f4c2059947d22547e39978c1185dc48ba3be4f7d337b6_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel9@sha256%3A853f2430db6aceeb634f4c2059947d22547e39978c1185dc48ba3be4f7d337b6?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9\u0026tag=1782201696"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ca9d114cccf1e213f392c73a4f36af7efef15bc016636d27fc5c736a933cda14_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ca9d114cccf1e213f392c73a4f36af7efef15bc016636d27fc5c736a933cda14_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ca9d114cccf1e213f392c73a4f36af7efef15bc016636d27fc5c736a933cda14_arm64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9@sha256%3Aca9d114cccf1e213f392c73a4f36af7efef15bc016636d27fc5c736a933cda14?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-rhel9\u0026tag=1782201537"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf353c0b22a951c13996d5227406ed75923bf6dbaed9ea50892f32d664003c8d_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf353c0b22a951c13996d5227406ed75923bf6dbaed9ea50892f32d664003c8d_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf353c0b22a951c13996d5227406ed75923bf6dbaed9ea50892f32d664003c8d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel9@sha256%3Acf353c0b22a951c13996d5227406ed75923bf6dbaed9ea50892f32d664003c8d?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9\u0026tag=1782201696"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:99e5e5ef3be5b42ef54d1fbcceac268c670c05a47c3e982c1088d010499c9ae8_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:99e5e5ef3be5b42ef54d1fbcceac268c670c05a47c3e982c1088d010499c9ae8_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:99e5e5ef3be5b42ef54d1fbcceac268c670c05a47c3e982c1088d010499c9ae8_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9@sha256%3A99e5e5ef3be5b42ef54d1fbcceac268c670c05a47c3e982c1088d010499c9ae8?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-rhel9\u0026tag=1782201537"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cd49f834dca7cc30e12add0fb3247d82981f722d353fc15523ad247df8e6d25c_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cd49f834dca7cc30e12add0fb3247d82981f722d353fc15523ad247df8e6d25c_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cd49f834dca7cc30e12add0fb3247d82981f722d353fc15523ad247df8e6d25c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel9@sha256%3Acd49f834dca7cc30e12add0fb3247d82981f722d353fc15523ad247df8e6d25c?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9\u0026tag=1782201696"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:9ac5ee0b1ffc79c320478d77a24d62789eb7162a564dc0e2be3c0a2ae2ffb272_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:9ac5ee0b1ffc79c320478d77a24d62789eb7162a564dc0e2be3c0a2ae2ffb272_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:9ac5ee0b1ffc79c320478d77a24d62789eb7162a564dc0e2be3c0a2ae2ffb272_s390x",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9@sha256%3A9ac5ee0b1ffc79c320478d77a24d62789eb7162a564dc0e2be3c0a2ae2ffb272?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-rhel9\u0026tag=1782201537"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:1c422bbe4c19201f0a63dd8175ae962208cbffccf096912858e6274b214994af_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:1c422bbe4c19201f0a63dd8175ae962208cbffccf096912858e6274b214994af_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:1c422bbe4c19201f0a63dd8175ae962208cbffccf096912858e6274b214994af_s390x",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel9@sha256%3A1c422bbe4c19201f0a63dd8175ae962208cbffccf096912858e6274b214994af?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9\u0026tag=1782201696"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:1c422bbe4c19201f0a63dd8175ae962208cbffccf096912858e6274b214994af_s390x as a component of Red Hat OpenShift Service Mesh 3.1",
"product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:1c422bbe4c19201f0a63dd8175ae962208cbffccf096912858e6274b214994af_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:1c422bbe4c19201f0a63dd8175ae962208cbffccf096912858e6274b214994af_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:853f2430db6aceeb634f4c2059947d22547e39978c1185dc48ba3be4f7d337b6_amd64 as a component of Red Hat OpenShift Service Mesh 3.1",
"product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:853f2430db6aceeb634f4c2059947d22547e39978c1185dc48ba3be4f7d337b6_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:853f2430db6aceeb634f4c2059947d22547e39978c1185dc48ba3be4f7d337b6_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cd49f834dca7cc30e12add0fb3247d82981f722d353fc15523ad247df8e6d25c_ppc64le as a component of Red Hat OpenShift Service Mesh 3.1",
"product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cd49f834dca7cc30e12add0fb3247d82981f722d353fc15523ad247df8e6d25c_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cd49f834dca7cc30e12add0fb3247d82981f722d353fc15523ad247df8e6d25c_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf353c0b22a951c13996d5227406ed75923bf6dbaed9ea50892f32d664003c8d_arm64 as a component of Red Hat OpenShift Service Mesh 3.1",
"product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf353c0b22a951c13996d5227406ed75923bf6dbaed9ea50892f32d664003c8d_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf353c0b22a951c13996d5227406ed75923bf6dbaed9ea50892f32d664003c8d_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:99e5e5ef3be5b42ef54d1fbcceac268c670c05a47c3e982c1088d010499c9ae8_ppc64le as a component of Red Hat OpenShift Service Mesh 3.1",
"product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:99e5e5ef3be5b42ef54d1fbcceac268c670c05a47c3e982c1088d010499c9ae8_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:99e5e5ef3be5b42ef54d1fbcceac268c670c05a47c3e982c1088d010499c9ae8_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:9ac5ee0b1ffc79c320478d77a24d62789eb7162a564dc0e2be3c0a2ae2ffb272_s390x as a component of Red Hat OpenShift Service Mesh 3.1",
"product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:9ac5ee0b1ffc79c320478d77a24d62789eb7162a564dc0e2be3c0a2ae2ffb272_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:9ac5ee0b1ffc79c320478d77a24d62789eb7162a564dc0e2be3c0a2ae2ffb272_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c5926bbd0cb2414e4fd0117e11ccec6d33924c2ea255ca7f500419c7886807cf_amd64 as a component of Red Hat OpenShift Service Mesh 3.1",
"product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c5926bbd0cb2414e4fd0117e11ccec6d33924c2ea255ca7f500419c7886807cf_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c5926bbd0cb2414e4fd0117e11ccec6d33924c2ea255ca7f500419c7886807cf_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ca9d114cccf1e213f392c73a4f36af7efef15bc016636d27fc5c736a933cda14_arm64 as a component of Red Hat OpenShift Service Mesh 3.1",
"product_id": "Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ca9d114cccf1e213f392c73a4f36af7efef15bc016636d27fc5c736a933cda14_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ca9d114cccf1e213f392c73a4f36af7efef15bc016636d27fc5c736a933cda14_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-12143",
"cwe": {
"id": "CWE-93",
"name": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
},
"discovery_date": "2026-06-12T19:00:57.360953+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488480"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (\") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "form-data: form-data: Form field override via CRLF injection",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important impact flaw in the form-data library: a remote attacker can inject arbitrary headers or additional multipart parts via CRLF injection in field names or filenames, potentially overriding sensitive form fields and affecting data integrity.\n\nFor RHOAI and RHEL AI, severity is Moderate because affected versions appear only as a transitive npm dependency in RHOAI (dashboard, mod-arch plugins, MLflow UI) and RHEL AI 3.4 bootc images, and those products use fixed field names for uploads rather than passing untrusted user input as multipart field names or filenames. The documented exploit path is therefore not reachable in default deployments. Practical impact is limited to non-default or custom integrations that forward multipart requests using attacker-controlled field names.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:1c422bbe4c19201f0a63dd8175ae962208cbffccf096912858e6274b214994af_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:853f2430db6aceeb634f4c2059947d22547e39978c1185dc48ba3be4f7d337b6_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cd49f834dca7cc30e12add0fb3247d82981f722d353fc15523ad247df8e6d25c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf353c0b22a951c13996d5227406ed75923bf6dbaed9ea50892f32d664003c8d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:99e5e5ef3be5b42ef54d1fbcceac268c670c05a47c3e982c1088d010499c9ae8_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:9ac5ee0b1ffc79c320478d77a24d62789eb7162a564dc0e2be3c0a2ae2ffb272_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c5926bbd0cb2414e4fd0117e11ccec6d33924c2ea255ca7f500419c7886807cf_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ca9d114cccf1e213f392c73a4f36af7efef15bc016636d27fc5c736a933cda14_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "RHBZ#2488480",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488480"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12143",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12143"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://cwe.mitre.org/data/definitions/93.html",
"url": "https://cwe.mitre.org/data/definitions/93.html"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435",
"url": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229",
"url": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045",
"url": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx",
"url": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx"
},
{
"category": "external",
"summary": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data",
"url": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/form-data",
"url": "https://www.npmjs.com/package/form-data"
}
],
"release_date": "2026-06-12T18:01:30.362000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T16:41:59+00:00",
"details": "See Kiali 2.11.13 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.1/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:1c422bbe4c19201f0a63dd8175ae962208cbffccf096912858e6274b214994af_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:853f2430db6aceeb634f4c2059947d22547e39978c1185dc48ba3be4f7d337b6_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cd49f834dca7cc30e12add0fb3247d82981f722d353fc15523ad247df8e6d25c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf353c0b22a951c13996d5227406ed75923bf6dbaed9ea50892f32d664003c8d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:99e5e5ef3be5b42ef54d1fbcceac268c670c05a47c3e982c1088d010499c9ae8_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:9ac5ee0b1ffc79c320478d77a24d62789eb7162a564dc0e2be3c0a2ae2ffb272_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c5926bbd0cb2414e4fd0117e11ccec6d33924c2ea255ca7f500419c7886807cf_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ca9d114cccf1e213f392c73a4f36af7efef15bc016636d27fc5c736a933cda14_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33163"
},
{
"category": "workaround",
"details": "Applications using the `form-data` library should implement strict input validation and sanitization for all field names and filenames derived from untrusted sources. This prevents the injection of control characters (CR, LF, \") that could lead to header injection or form field overrides. Deployments that exclusively use fixed or trusted field names are not impacted.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:1c422bbe4c19201f0a63dd8175ae962208cbffccf096912858e6274b214994af_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:853f2430db6aceeb634f4c2059947d22547e39978c1185dc48ba3be4f7d337b6_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cd49f834dca7cc30e12add0fb3247d82981f722d353fc15523ad247df8e6d25c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf353c0b22a951c13996d5227406ed75923bf6dbaed9ea50892f32d664003c8d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:99e5e5ef3be5b42ef54d1fbcceac268c670c05a47c3e982c1088d010499c9ae8_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:9ac5ee0b1ffc79c320478d77a24d62789eb7162a564dc0e2be3c0a2ae2ffb272_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c5926bbd0cb2414e4fd0117e11ccec6d33924c2ea255ca7f500419c7886807cf_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ca9d114cccf1e213f392c73a4f36af7efef15bc016636d27fc5c736a933cda14_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:1c422bbe4c19201f0a63dd8175ae962208cbffccf096912858e6274b214994af_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:853f2430db6aceeb634f4c2059947d22547e39978c1185dc48ba3be4f7d337b6_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cd49f834dca7cc30e12add0fb3247d82981f722d353fc15523ad247df8e6d25c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf353c0b22a951c13996d5227406ed75923bf6dbaed9ea50892f32d664003c8d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:99e5e5ef3be5b42ef54d1fbcceac268c670c05a47c3e982c1088d010499c9ae8_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:9ac5ee0b1ffc79c320478d77a24d62789eb7162a564dc0e2be3c0a2ae2ffb272_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c5926bbd0cb2414e4fd0117e11ccec6d33924c2ea255ca7f500419c7886807cf_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ca9d114cccf1e213f392c73a4f36af7efef15bc016636d27fc5c736a933cda14_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "form-data: form-data: Form field override via CRLF injection"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:1c422bbe4c19201f0a63dd8175ae962208cbffccf096912858e6274b214994af_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:853f2430db6aceeb634f4c2059947d22547e39978c1185dc48ba3be4f7d337b6_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cd49f834dca7cc30e12add0fb3247d82981f722d353fc15523ad247df8e6d25c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf353c0b22a951c13996d5227406ed75923bf6dbaed9ea50892f32d664003c8d_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:99e5e5ef3be5b42ef54d1fbcceac268c670c05a47c3e982c1088d010499c9ae8_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:9ac5ee0b1ffc79c320478d77a24d62789eb7162a564dc0e2be3c0a2ae2ffb272_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c5926bbd0cb2414e4fd0117e11ccec6d33924c2ea255ca7f500419c7886807cf_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ca9d114cccf1e213f392c73a4f36af7efef15bc016636d27fc5c736a933cda14_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:1c422bbe4c19201f0a63dd8175ae962208cbffccf096912858e6274b214994af_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:853f2430db6aceeb634f4c2059947d22547e39978c1185dc48ba3be4f7d337b6_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cd49f834dca7cc30e12add0fb3247d82981f722d353fc15523ad247df8e6d25c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf353c0b22a951c13996d5227406ed75923bf6dbaed9ea50892f32d664003c8d_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T16:41:59+00:00",
"details": "See Kiali 2.11.13 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.1/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:99e5e5ef3be5b42ef54d1fbcceac268c670c05a47c3e982c1088d010499c9ae8_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:9ac5ee0b1ffc79c320478d77a24d62789eb7162a564dc0e2be3c0a2ae2ffb272_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c5926bbd0cb2414e4fd0117e11ccec6d33924c2ea255ca7f500419c7886807cf_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ca9d114cccf1e213f392c73a4f36af7efef15bc016636d27fc5c736a933cda14_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33163"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:1c422bbe4c19201f0a63dd8175ae962208cbffccf096912858e6274b214994af_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:853f2430db6aceeb634f4c2059947d22547e39978c1185dc48ba3be4f7d337b6_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cd49f834dca7cc30e12add0fb3247d82981f722d353fc15523ad247df8e6d25c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf353c0b22a951c13996d5227406ed75923bf6dbaed9ea50892f32d664003c8d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:99e5e5ef3be5b42ef54d1fbcceac268c670c05a47c3e982c1088d010499c9ae8_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:9ac5ee0b1ffc79c320478d77a24d62789eb7162a564dc0e2be3c0a2ae2ffb272_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c5926bbd0cb2414e4fd0117e11ccec6d33924c2ea255ca7f500419c7886807cf_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ca9d114cccf1e213f392c73a4f36af7efef15bc016636d27fc5c736a933cda14_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:1c422bbe4c19201f0a63dd8175ae962208cbffccf096912858e6274b214994af_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:853f2430db6aceeb634f4c2059947d22547e39978c1185dc48ba3be4f7d337b6_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cd49f834dca7cc30e12add0fb3247d82981f722d353fc15523ad247df8e6d25c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf353c0b22a951c13996d5227406ed75923bf6dbaed9ea50892f32d664003c8d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:99e5e5ef3be5b42ef54d1fbcceac268c670c05a47c3e982c1088d010499c9ae8_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:9ac5ee0b1ffc79c320478d77a24d62789eb7162a564dc0e2be3c0a2ae2ffb272_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c5926bbd0cb2414e4fd0117e11ccec6d33924c2ea255ca7f500419c7886807cf_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ca9d114cccf1e213f392c73a4f36af7efef15bc016636d27fc5c736a933cda14_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-42338",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-12T21:01:14.436876+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2476810"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ip-address, a JavaScript library for parsing and manipulating IPv4 and IPv6 addresses. This vulnerability allows a remote attacker to perform cross-site scripting (XSS) by providing untrusted input to the Address6 constructor. When an application renders the output of Address6.group(), Address6.link(), or the AddressError.parseMessage as HTML without proper escaping, the attacker-controlled content can be executed in the user\u0027s browser.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in the `ip-address` JavaScript library is rated as Important. It allows for cross-site scripting (XSS) when an application processes untrusted input through the `Address6` constructor and subsequently renders the unescaped output of methods like `Address6.group()`, `Address6.link()`, or `AddressError.parseMessage` directly as HTML. While the library itself is affected, exploitation is contingent on specific application-level rendering practices that may not be common in Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:1c422bbe4c19201f0a63dd8175ae962208cbffccf096912858e6274b214994af_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:853f2430db6aceeb634f4c2059947d22547e39978c1185dc48ba3be4f7d337b6_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cd49f834dca7cc30e12add0fb3247d82981f722d353fc15523ad247df8e6d25c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf353c0b22a951c13996d5227406ed75923bf6dbaed9ea50892f32d664003c8d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:99e5e5ef3be5b42ef54d1fbcceac268c670c05a47c3e982c1088d010499c9ae8_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:9ac5ee0b1ffc79c320478d77a24d62789eb7162a564dc0e2be3c0a2ae2ffb272_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c5926bbd0cb2414e4fd0117e11ccec6d33924c2ea255ca7f500419c7886807cf_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ca9d114cccf1e213f392c73a4f36af7efef15bc016636d27fc5c736a933cda14_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42338"
},
{
"category": "external",
"summary": "RHBZ#2476810",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2476810"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42338",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42338"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42338",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42338"
},
{
"category": "external",
"summary": "https://github.com/beaugunderson/ip-address/security/advisories/GHSA-v2v4-37r5-5v8g",
"url": "https://github.com/beaugunderson/ip-address/security/advisories/GHSA-v2v4-37r5-5v8g"
}
],
"release_date": "2026-05-12T19:43:16.470000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T16:41:59+00:00",
"details": "See Kiali 2.11.13 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.1/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:1c422bbe4c19201f0a63dd8175ae962208cbffccf096912858e6274b214994af_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:853f2430db6aceeb634f4c2059947d22547e39978c1185dc48ba3be4f7d337b6_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cd49f834dca7cc30e12add0fb3247d82981f722d353fc15523ad247df8e6d25c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf353c0b22a951c13996d5227406ed75923bf6dbaed9ea50892f32d664003c8d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:99e5e5ef3be5b42ef54d1fbcceac268c670c05a47c3e982c1088d010499c9ae8_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:9ac5ee0b1ffc79c320478d77a24d62789eb7162a564dc0e2be3c0a2ae2ffb272_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c5926bbd0cb2414e4fd0117e11ccec6d33924c2ea255ca7f500419c7886807cf_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ca9d114cccf1e213f392c73a4f36af7efef15bc016636d27fc5c736a933cda14_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33163"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:1c422bbe4c19201f0a63dd8175ae962208cbffccf096912858e6274b214994af_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:853f2430db6aceeb634f4c2059947d22547e39978c1185dc48ba3be4f7d337b6_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cd49f834dca7cc30e12add0fb3247d82981f722d353fc15523ad247df8e6d25c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf353c0b22a951c13996d5227406ed75923bf6dbaed9ea50892f32d664003c8d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:99e5e5ef3be5b42ef54d1fbcceac268c670c05a47c3e982c1088d010499c9ae8_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:9ac5ee0b1ffc79c320478d77a24d62789eb7162a564dc0e2be3c0a2ae2ffb272_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c5926bbd0cb2414e4fd0117e11ccec6d33924c2ea255ca7f500419c7886807cf_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ca9d114cccf1e213f392c73a4f36af7efef15bc016636d27fc5c736a933cda14_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:1c422bbe4c19201f0a63dd8175ae962208cbffccf096912858e6274b214994af_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:853f2430db6aceeb634f4c2059947d22547e39978c1185dc48ba3be4f7d337b6_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cd49f834dca7cc30e12add0fb3247d82981f722d353fc15523ad247df8e6d25c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf353c0b22a951c13996d5227406ed75923bf6dbaed9ea50892f32d664003c8d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:99e5e5ef3be5b42ef54d1fbcceac268c670c05a47c3e982c1088d010499c9ae8_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:9ac5ee0b1ffc79c320478d77a24d62789eb7162a564dc0e2be3c0a2ae2ffb272_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c5926bbd0cb2414e4fd0117e11ccec6d33924c2ea255ca7f500419c7886807cf_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ca9d114cccf1e213f392c73a4f36af7efef15bc016636d27fc5c736a933cda14_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input"
},
{
"cve": "CVE-2026-44486",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:30.944384+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487947"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in the Axios Node.js HTTP adapter. Red Hat products utilizing Axios in a Node.js environment with an authenticated proxy and automatic redirects enabled are susceptible. The vulnerability arises when a request, initially sent through an authenticated proxy, is redirected to a target that no longer uses the proxy, potentially leaking `Proxy-Authorization` headers containing sensitive credentials to an untrusted remote server. This risk is heightened in deployments where applications interact with untrusted HTTP origins.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:1c422bbe4c19201f0a63dd8175ae962208cbffccf096912858e6274b214994af_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:853f2430db6aceeb634f4c2059947d22547e39978c1185dc48ba3be4f7d337b6_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cd49f834dca7cc30e12add0fb3247d82981f722d353fc15523ad247df8e6d25c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf353c0b22a951c13996d5227406ed75923bf6dbaed9ea50892f32d664003c8d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:99e5e5ef3be5b42ef54d1fbcceac268c670c05a47c3e982c1088d010499c9ae8_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:9ac5ee0b1ffc79c320478d77a24d62789eb7162a564dc0e2be3c0a2ae2ffb272_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c5926bbd0cb2414e4fd0117e11ccec6d33924c2ea255ca7f500419c7886807cf_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ca9d114cccf1e213f392c73a4f36af7efef15bc016636d27fc5c736a933cda14_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "RHBZ#2487947",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487947"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44486",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44486"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc",
"url": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc"
}
],
"release_date": "2026-06-11T15:39:07.714000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T16:41:59+00:00",
"details": "See Kiali 2.11.13 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.1/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:1c422bbe4c19201f0a63dd8175ae962208cbffccf096912858e6274b214994af_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:853f2430db6aceeb634f4c2059947d22547e39978c1185dc48ba3be4f7d337b6_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cd49f834dca7cc30e12add0fb3247d82981f722d353fc15523ad247df8e6d25c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf353c0b22a951c13996d5227406ed75923bf6dbaed9ea50892f32d664003c8d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:99e5e5ef3be5b42ef54d1fbcceac268c670c05a47c3e982c1088d010499c9ae8_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:9ac5ee0b1ffc79c320478d77a24d62789eb7162a564dc0e2be3c0a2ae2ffb272_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c5926bbd0cb2414e4fd0117e11ccec6d33924c2ea255ca7f500419c7886807cf_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ca9d114cccf1e213f392c73a4f36af7efef15bc016636d27fc5c736a933cda14_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33163"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:1c422bbe4c19201f0a63dd8175ae962208cbffccf096912858e6274b214994af_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:853f2430db6aceeb634f4c2059947d22547e39978c1185dc48ba3be4f7d337b6_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cd49f834dca7cc30e12add0fb3247d82981f722d353fc15523ad247df8e6d25c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf353c0b22a951c13996d5227406ed75923bf6dbaed9ea50892f32d664003c8d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:99e5e5ef3be5b42ef54d1fbcceac268c670c05a47c3e982c1088d010499c9ae8_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:9ac5ee0b1ffc79c320478d77a24d62789eb7162a564dc0e2be3c0a2ae2ffb272_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c5926bbd0cb2414e4fd0117e11ccec6d33924c2ea255ca7f500419c7886807cf_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ca9d114cccf1e213f392c73a4f36af7efef15bc016636d27fc5c736a933cda14_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:1c422bbe4c19201f0a63dd8175ae962208cbffccf096912858e6274b214994af_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:853f2430db6aceeb634f4c2059947d22547e39978c1185dc48ba3be4f7d337b6_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cd49f834dca7cc30e12add0fb3247d82981f722d353fc15523ad247df8e6d25c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf353c0b22a951c13996d5227406ed75923bf6dbaed9ea50892f32d664003c8d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:99e5e5ef3be5b42ef54d1fbcceac268c670c05a47c3e982c1088d010499c9ae8_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:9ac5ee0b1ffc79c320478d77a24d62789eb7162a564dc0e2be3c0a2ae2ffb272_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c5926bbd0cb2414e4fd0117e11ccec6d33924c2ea255ca7f500419c7886807cf_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ca9d114cccf1e213f392c73a4f36af7efef15bc016636d27fc5c736a933cda14_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects"
},
{
"cve": "CVE-2026-44487",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:34.091476+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487948"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via redirect flows",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in Axios affecting Node.js environments. When an application uses Axios with an authenticated HTTP proxy and follows redirects from an HTTP to a non-proxied HTTPS destination, the Proxy-Authorization header may be inadvertently sent to the final origin server. This could lead to the exposure of sensitive proxy credentials to an unintended third party.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:1c422bbe4c19201f0a63dd8175ae962208cbffccf096912858e6274b214994af_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:853f2430db6aceeb634f4c2059947d22547e39978c1185dc48ba3be4f7d337b6_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cd49f834dca7cc30e12add0fb3247d82981f722d353fc15523ad247df8e6d25c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf353c0b22a951c13996d5227406ed75923bf6dbaed9ea50892f32d664003c8d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:99e5e5ef3be5b42ef54d1fbcceac268c670c05a47c3e982c1088d010499c9ae8_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:9ac5ee0b1ffc79c320478d77a24d62789eb7162a564dc0e2be3c0a2ae2ffb272_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c5926bbd0cb2414e4fd0117e11ccec6d33924c2ea255ca7f500419c7886807cf_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ca9d114cccf1e213f392c73a4f36af7efef15bc016636d27fc5c736a933cda14_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "RHBZ#2487948",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487948"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44487",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44487"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v",
"url": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v"
}
],
"release_date": "2026-06-11T15:38:25.150000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T16:41:59+00:00",
"details": "See Kiali 2.11.13 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.1/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:1c422bbe4c19201f0a63dd8175ae962208cbffccf096912858e6274b214994af_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:853f2430db6aceeb634f4c2059947d22547e39978c1185dc48ba3be4f7d337b6_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cd49f834dca7cc30e12add0fb3247d82981f722d353fc15523ad247df8e6d25c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf353c0b22a951c13996d5227406ed75923bf6dbaed9ea50892f32d664003c8d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:99e5e5ef3be5b42ef54d1fbcceac268c670c05a47c3e982c1088d010499c9ae8_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:9ac5ee0b1ffc79c320478d77a24d62789eb7162a564dc0e2be3c0a2ae2ffb272_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c5926bbd0cb2414e4fd0117e11ccec6d33924c2ea255ca7f500419c7886807cf_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ca9d114cccf1e213f392c73a4f36af7efef15bc016636d27fc5c736a933cda14_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33163"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:1c422bbe4c19201f0a63dd8175ae962208cbffccf096912858e6274b214994af_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:853f2430db6aceeb634f4c2059947d22547e39978c1185dc48ba3be4f7d337b6_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cd49f834dca7cc30e12add0fb3247d82981f722d353fc15523ad247df8e6d25c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf353c0b22a951c13996d5227406ed75923bf6dbaed9ea50892f32d664003c8d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:99e5e5ef3be5b42ef54d1fbcceac268c670c05a47c3e982c1088d010499c9ae8_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:9ac5ee0b1ffc79c320478d77a24d62789eb7162a564dc0e2be3c0a2ae2ffb272_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c5926bbd0cb2414e4fd0117e11ccec6d33924c2ea255ca7f500419c7886807cf_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ca9d114cccf1e213f392c73a4f36af7efef15bc016636d27fc5c736a933cda14_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:1c422bbe4c19201f0a63dd8175ae962208cbffccf096912858e6274b214994af_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:853f2430db6aceeb634f4c2059947d22547e39978c1185dc48ba3be4f7d337b6_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cd49f834dca7cc30e12add0fb3247d82981f722d353fc15523ad247df8e6d25c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf353c0b22a951c13996d5227406ed75923bf6dbaed9ea50892f32d664003c8d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:99e5e5ef3be5b42ef54d1fbcceac268c670c05a47c3e982c1088d010499c9ae8_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:9ac5ee0b1ffc79c320478d77a24d62789eb7162a564dc0e2be3c0a2ae2ffb272_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c5926bbd0cb2414e4fd0117e11ccec6d33924c2ea255ca7f500419c7886807cf_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ca9d114cccf1e213f392c73a4f36af7efef15bc016636d27fc5c736a933cda14_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via redirect flows"
},
{
"cve": "CVE-2026-44488",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-11T17:01:36.836488+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487949"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Denial of Service due to unenforced request and response size limits",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A denial of service flaw was found in Axios, a JavaScript HTTP client library. This issue arises when applications utilize the `fetch` adapter, as configured request and response size limits are not properly enforced. A remote attacker could exploit this by sending or receiving excessively large data bodies, leading to resource exhaustion and potential denial of service in affected server-side applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:1c422bbe4c19201f0a63dd8175ae962208cbffccf096912858e6274b214994af_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:853f2430db6aceeb634f4c2059947d22547e39978c1185dc48ba3be4f7d337b6_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cd49f834dca7cc30e12add0fb3247d82981f722d353fc15523ad247df8e6d25c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf353c0b22a951c13996d5227406ed75923bf6dbaed9ea50892f32d664003c8d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:99e5e5ef3be5b42ef54d1fbcceac268c670c05a47c3e982c1088d010499c9ae8_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:9ac5ee0b1ffc79c320478d77a24d62789eb7162a564dc0e2be3c0a2ae2ffb272_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c5926bbd0cb2414e4fd0117e11ccec6d33924c2ea255ca7f500419c7886807cf_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ca9d114cccf1e213f392c73a4f36af7efef15bc016636d27fc5c736a933cda14_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "RHBZ#2487949",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487949"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf"
}
],
"release_date": "2026-06-11T15:37:38.013000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T16:41:59+00:00",
"details": "See Kiali 2.11.13 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.1/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:1c422bbe4c19201f0a63dd8175ae962208cbffccf096912858e6274b214994af_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:853f2430db6aceeb634f4c2059947d22547e39978c1185dc48ba3be4f7d337b6_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cd49f834dca7cc30e12add0fb3247d82981f722d353fc15523ad247df8e6d25c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf353c0b22a951c13996d5227406ed75923bf6dbaed9ea50892f32d664003c8d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:99e5e5ef3be5b42ef54d1fbcceac268c670c05a47c3e982c1088d010499c9ae8_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:9ac5ee0b1ffc79c320478d77a24d62789eb7162a564dc0e2be3c0a2ae2ffb272_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c5926bbd0cb2414e4fd0117e11ccec6d33924c2ea255ca7f500419c7886807cf_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ca9d114cccf1e213f392c73a4f36af7efef15bc016636d27fc5c736a933cda14_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33163"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:1c422bbe4c19201f0a63dd8175ae962208cbffccf096912858e6274b214994af_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:853f2430db6aceeb634f4c2059947d22547e39978c1185dc48ba3be4f7d337b6_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cd49f834dca7cc30e12add0fb3247d82981f722d353fc15523ad247df8e6d25c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf353c0b22a951c13996d5227406ed75923bf6dbaed9ea50892f32d664003c8d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:99e5e5ef3be5b42ef54d1fbcceac268c670c05a47c3e982c1088d010499c9ae8_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:9ac5ee0b1ffc79c320478d77a24d62789eb7162a564dc0e2be3c0a2ae2ffb272_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c5926bbd0cb2414e4fd0117e11ccec6d33924c2ea255ca7f500419c7886807cf_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ca9d114cccf1e213f392c73a4f36af7efef15bc016636d27fc5c736a933cda14_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:1c422bbe4c19201f0a63dd8175ae962208cbffccf096912858e6274b214994af_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:853f2430db6aceeb634f4c2059947d22547e39978c1185dc48ba3be4f7d337b6_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cd49f834dca7cc30e12add0fb3247d82981f722d353fc15523ad247df8e6d25c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf353c0b22a951c13996d5227406ed75923bf6dbaed9ea50892f32d664003c8d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:99e5e5ef3be5b42ef54d1fbcceac268c670c05a47c3e982c1088d010499c9ae8_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:9ac5ee0b1ffc79c320478d77a24d62789eb7162a564dc0e2be3c0a2ae2ffb272_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c5926bbd0cb2414e4fd0117e11ccec6d33924c2ea255ca7f500419c7886807cf_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ca9d114cccf1e213f392c73a4f36af7efef15bc016636d27fc5c736a933cda14_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Denial of Service due to unenforced request and response size limits"
},
{
"cve": "CVE-2026-44492",
"cwe": {
"id": "CWE-289",
"name": "Authentication Bypass by Alternate Name"
},
"discovery_date": "2026-06-11T17:00:56.761751+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487938"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Axios, a JavaScript HTTP client library, that allows for a proxy bypass. When a `NO_PROXY` environment variable is configured to prevent direct connections to specific IPv4 addresses, an attacker can craft a request URL using the IPv4-mapped IPv6 address format. This bypasses the intended `NO_PROXY` exclusion, routing the request through the configured proxy and potentially exposing internal services or sensitive information, such as cloud instance metadata credentials.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:1c422bbe4c19201f0a63dd8175ae962208cbffccf096912858e6274b214994af_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:853f2430db6aceeb634f4c2059947d22547e39978c1185dc48ba3be4f7d337b6_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cd49f834dca7cc30e12add0fb3247d82981f722d353fc15523ad247df8e6d25c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf353c0b22a951c13996d5227406ed75923bf6dbaed9ea50892f32d664003c8d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:99e5e5ef3be5b42ef54d1fbcceac268c670c05a47c3e982c1088d010499c9ae8_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:9ac5ee0b1ffc79c320478d77a24d62789eb7162a564dc0e2be3c0a2ae2ffb272_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c5926bbd0cb2414e4fd0117e11ccec6d33924c2ea255ca7f500419c7886807cf_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ca9d114cccf1e213f392c73a4f36af7efef15bc016636d27fc5c736a933cda14_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "RHBZ#2487938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487938"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44492"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv",
"url": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv"
}
],
"release_date": "2026-06-11T15:29:13.890000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T16:41:59+00:00",
"details": "See Kiali 2.11.13 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.1/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:1c422bbe4c19201f0a63dd8175ae962208cbffccf096912858e6274b214994af_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:853f2430db6aceeb634f4c2059947d22547e39978c1185dc48ba3be4f7d337b6_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cd49f834dca7cc30e12add0fb3247d82981f722d353fc15523ad247df8e6d25c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf353c0b22a951c13996d5227406ed75923bf6dbaed9ea50892f32d664003c8d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:99e5e5ef3be5b42ef54d1fbcceac268c670c05a47c3e982c1088d010499c9ae8_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:9ac5ee0b1ffc79c320478d77a24d62789eb7162a564dc0e2be3c0a2ae2ffb272_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c5926bbd0cb2414e4fd0117e11ccec6d33924c2ea255ca7f500419c7886807cf_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ca9d114cccf1e213f392c73a4f36af7efef15bc016636d27fc5c736a933cda14_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33163"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:1c422bbe4c19201f0a63dd8175ae962208cbffccf096912858e6274b214994af_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:853f2430db6aceeb634f4c2059947d22547e39978c1185dc48ba3be4f7d337b6_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cd49f834dca7cc30e12add0fb3247d82981f722d353fc15523ad247df8e6d25c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf353c0b22a951c13996d5227406ed75923bf6dbaed9ea50892f32d664003c8d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:99e5e5ef3be5b42ef54d1fbcceac268c670c05a47c3e982c1088d010499c9ae8_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:9ac5ee0b1ffc79c320478d77a24d62789eb7162a564dc0e2be3c0a2ae2ffb272_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c5926bbd0cb2414e4fd0117e11ccec6d33924c2ea255ca7f500419c7886807cf_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ca9d114cccf1e213f392c73a4f36af7efef15bc016636d27fc5c736a933cda14_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:1c422bbe4c19201f0a63dd8175ae962208cbffccf096912858e6274b214994af_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:853f2430db6aceeb634f4c2059947d22547e39978c1185dc48ba3be4f7d337b6_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cd49f834dca7cc30e12add0fb3247d82981f722d353fc15523ad247df8e6d25c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf353c0b22a951c13996d5227406ed75923bf6dbaed9ea50892f32d664003c8d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:99e5e5ef3be5b42ef54d1fbcceac268c670c05a47c3e982c1088d010499c9ae8_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:9ac5ee0b1ffc79c320478d77a24d62789eb7162a564dc0e2be3c0a2ae2ffb272_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c5926bbd0cb2414e4fd0117e11ccec6d33924c2ea255ca7f500419c7886807cf_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ca9d114cccf1e213f392c73a4f36af7efef15bc016636d27fc5c736a933cda14_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization"
},
{
"cve": "CVE-2026-44494",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:01:12.945664+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487942"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. This vulnerability, a Prototype Pollution \"Gadget\" attack, allows an attacker to escalate any existing Object.prototype pollution in an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the Axios library allows an attacker to escalate existing prototype pollution vulnerabilities within an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. By injecting a malicious proxy configuration into the `Object.prototype`, an attacker can intercept, read, and modify all HTTP traffic, including sensitive authentication credentials, without direct user interaction. This poses a significant risk to data confidentiality and integrity in Red Hat products that utilize the Axios library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:1c422bbe4c19201f0a63dd8175ae962208cbffccf096912858e6274b214994af_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:853f2430db6aceeb634f4c2059947d22547e39978c1185dc48ba3be4f7d337b6_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cd49f834dca7cc30e12add0fb3247d82981f722d353fc15523ad247df8e6d25c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf353c0b22a951c13996d5227406ed75923bf6dbaed9ea50892f32d664003c8d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:99e5e5ef3be5b42ef54d1fbcceac268c670c05a47c3e982c1088d010499c9ae8_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:9ac5ee0b1ffc79c320478d77a24d62789eb7162a564dc0e2be3c0a2ae2ffb272_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c5926bbd0cb2414e4fd0117e11ccec6d33924c2ea255ca7f500419c7886807cf_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ca9d114cccf1e213f392c73a4f36af7efef15bc016636d27fc5c736a933cda14_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "RHBZ#2487942",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487942"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44494",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44494"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh",
"url": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh"
}
],
"release_date": "2026-06-11T15:32:03.155000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T16:41:59+00:00",
"details": "See Kiali 2.11.13 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.1/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:1c422bbe4c19201f0a63dd8175ae962208cbffccf096912858e6274b214994af_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:853f2430db6aceeb634f4c2059947d22547e39978c1185dc48ba3be4f7d337b6_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cd49f834dca7cc30e12add0fb3247d82981f722d353fc15523ad247df8e6d25c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf353c0b22a951c13996d5227406ed75923bf6dbaed9ea50892f32d664003c8d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:99e5e5ef3be5b42ef54d1fbcceac268c670c05a47c3e982c1088d010499c9ae8_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:9ac5ee0b1ffc79c320478d77a24d62789eb7162a564dc0e2be3c0a2ae2ffb272_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c5926bbd0cb2414e4fd0117e11ccec6d33924c2ea255ca7f500419c7886807cf_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ca9d114cccf1e213f392c73a4f36af7efef15bc016636d27fc5c736a933cda14_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33163"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:1c422bbe4c19201f0a63dd8175ae962208cbffccf096912858e6274b214994af_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:853f2430db6aceeb634f4c2059947d22547e39978c1185dc48ba3be4f7d337b6_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cd49f834dca7cc30e12add0fb3247d82981f722d353fc15523ad247df8e6d25c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf353c0b22a951c13996d5227406ed75923bf6dbaed9ea50892f32d664003c8d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:99e5e5ef3be5b42ef54d1fbcceac268c670c05a47c3e982c1088d010499c9ae8_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:9ac5ee0b1ffc79c320478d77a24d62789eb7162a564dc0e2be3c0a2ae2ffb272_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c5926bbd0cb2414e4fd0117e11ccec6d33924c2ea255ca7f500419c7886807cf_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ca9d114cccf1e213f392c73a4f36af7efef15bc016636d27fc5c736a933cda14_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:1c422bbe4c19201f0a63dd8175ae962208cbffccf096912858e6274b214994af_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:853f2430db6aceeb634f4c2059947d22547e39978c1185dc48ba3be4f7d337b6_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cd49f834dca7cc30e12add0fb3247d82981f722d353fc15523ad247df8e6d25c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf353c0b22a951c13996d5227406ed75923bf6dbaed9ea50892f32d664003c8d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:99e5e5ef3be5b42ef54d1fbcceac268c670c05a47c3e982c1088d010499c9ae8_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:9ac5ee0b1ffc79c320478d77a24d62789eb7162a564dc0e2be3c0a2ae2ffb272_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c5926bbd0cb2414e4fd0117e11ccec6d33924c2ea255ca7f500419c7886807cf_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ca9d114cccf1e213f392c73a4f36af7efef15bc016636d27fc5c736a933cda14_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution"
},
{
"cve": "CVE-2026-44495",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:00:53.999811+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487937"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure due to prototype pollution vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Axios, a promise-based HTTP client, can lead to information disclosure, including credential theft and response hijacking, or denial of service. Exploitation requires a separate prototype pollution vulnerability in the same JavaScript process, allowing an attacker to control `Object.prototype.transformResponse`. Red Hat products using affected Axios versions are at risk if another component introduces such pollution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:1c422bbe4c19201f0a63dd8175ae962208cbffccf096912858e6274b214994af_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:853f2430db6aceeb634f4c2059947d22547e39978c1185dc48ba3be4f7d337b6_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cd49f834dca7cc30e12add0fb3247d82981f722d353fc15523ad247df8e6d25c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf353c0b22a951c13996d5227406ed75923bf6dbaed9ea50892f32d664003c8d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:99e5e5ef3be5b42ef54d1fbcceac268c670c05a47c3e982c1088d010499c9ae8_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:9ac5ee0b1ffc79c320478d77a24d62789eb7162a564dc0e2be3c0a2ae2ffb272_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c5926bbd0cb2414e4fd0117e11ccec6d33924c2ea255ca7f500419c7886807cf_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ca9d114cccf1e213f392c73a4f36af7efef15bc016636d27fc5c736a933cda14_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "RHBZ#2487937",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487937"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44495",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw"
}
],
"release_date": "2026-06-11T15:33:12.433000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T16:41:59+00:00",
"details": "See Kiali 2.11.13 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.1/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:1c422bbe4c19201f0a63dd8175ae962208cbffccf096912858e6274b214994af_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:853f2430db6aceeb634f4c2059947d22547e39978c1185dc48ba3be4f7d337b6_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cd49f834dca7cc30e12add0fb3247d82981f722d353fc15523ad247df8e6d25c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf353c0b22a951c13996d5227406ed75923bf6dbaed9ea50892f32d664003c8d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:99e5e5ef3be5b42ef54d1fbcceac268c670c05a47c3e982c1088d010499c9ae8_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:9ac5ee0b1ffc79c320478d77a24d62789eb7162a564dc0e2be3c0a2ae2ffb272_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c5926bbd0cb2414e4fd0117e11ccec6d33924c2ea255ca7f500419c7886807cf_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ca9d114cccf1e213f392c73a4f36af7efef15bc016636d27fc5c736a933cda14_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33163"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:1c422bbe4c19201f0a63dd8175ae962208cbffccf096912858e6274b214994af_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:853f2430db6aceeb634f4c2059947d22547e39978c1185dc48ba3be4f7d337b6_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cd49f834dca7cc30e12add0fb3247d82981f722d353fc15523ad247df8e6d25c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf353c0b22a951c13996d5227406ed75923bf6dbaed9ea50892f32d664003c8d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:99e5e5ef3be5b42ef54d1fbcceac268c670c05a47c3e982c1088d010499c9ae8_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:9ac5ee0b1ffc79c320478d77a24d62789eb7162a564dc0e2be3c0a2ae2ffb272_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c5926bbd0cb2414e4fd0117e11ccec6d33924c2ea255ca7f500419c7886807cf_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ca9d114cccf1e213f392c73a4f36af7efef15bc016636d27fc5c736a933cda14_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:1c422bbe4c19201f0a63dd8175ae962208cbffccf096912858e6274b214994af_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:853f2430db6aceeb634f4c2059947d22547e39978c1185dc48ba3be4f7d337b6_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cd49f834dca7cc30e12add0fb3247d82981f722d353fc15523ad247df8e6d25c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf353c0b22a951c13996d5227406ed75923bf6dbaed9ea50892f32d664003c8d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:99e5e5ef3be5b42ef54d1fbcceac268c670c05a47c3e982c1088d010499c9ae8_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:9ac5ee0b1ffc79c320478d77a24d62789eb7162a564dc0e2be3c0a2ae2ffb272_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c5926bbd0cb2414e4fd0117e11ccec6d33924c2ea255ca7f500419c7886807cf_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ca9d114cccf1e213f392c73a4f36af7efef15bc016636d27fc5c736a933cda14_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure due to prototype pollution vulnerability"
},
{
"cve": "CVE-2026-44496",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-06-11T17:01:15.856386+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487943"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in Axios can lead to a client-side Denial of Service. An attacker capable of influencing the XSRF cookie name within a browser environment could trigger excessive regular expression processing, causing the affected browser tab to freeze and degrade user availability. This issue specifically impacts browser-based applications and does not affect Node.js HTTP adapter usage, React Native, or web workers.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:1c422bbe4c19201f0a63dd8175ae962208cbffccf096912858e6274b214994af_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:853f2430db6aceeb634f4c2059947d22547e39978c1185dc48ba3be4f7d337b6_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cd49f834dca7cc30e12add0fb3247d82981f722d353fc15523ad247df8e6d25c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf353c0b22a951c13996d5227406ed75923bf6dbaed9ea50892f32d664003c8d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:99e5e5ef3be5b42ef54d1fbcceac268c670c05a47c3e982c1088d010499c9ae8_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:9ac5ee0b1ffc79c320478d77a24d62789eb7162a564dc0e2be3c0a2ae2ffb272_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c5926bbd0cb2414e4fd0117e11ccec6d33924c2ea255ca7f500419c7886807cf_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ca9d114cccf1e213f392c73a4f36af7efef15bc016636d27fc5c736a933cda14_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "RHBZ#2487943",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487943"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44496",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44496"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf"
}
],
"release_date": "2026-06-11T15:34:28.492000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T16:41:59+00:00",
"details": "See Kiali 2.11.13 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.1/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:1c422bbe4c19201f0a63dd8175ae962208cbffccf096912858e6274b214994af_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:853f2430db6aceeb634f4c2059947d22547e39978c1185dc48ba3be4f7d337b6_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cd49f834dca7cc30e12add0fb3247d82981f722d353fc15523ad247df8e6d25c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf353c0b22a951c13996d5227406ed75923bf6dbaed9ea50892f32d664003c8d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:99e5e5ef3be5b42ef54d1fbcceac268c670c05a47c3e982c1088d010499c9ae8_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:9ac5ee0b1ffc79c320478d77a24d62789eb7162a564dc0e2be3c0a2ae2ffb272_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c5926bbd0cb2414e4fd0117e11ccec6d33924c2ea255ca7f500419c7886807cf_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ca9d114cccf1e213f392c73a4f36af7efef15bc016636d27fc5c736a933cda14_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33163"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:1c422bbe4c19201f0a63dd8175ae962208cbffccf096912858e6274b214994af_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:853f2430db6aceeb634f4c2059947d22547e39978c1185dc48ba3be4f7d337b6_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cd49f834dca7cc30e12add0fb3247d82981f722d353fc15523ad247df8e6d25c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf353c0b22a951c13996d5227406ed75923bf6dbaed9ea50892f32d664003c8d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:99e5e5ef3be5b42ef54d1fbcceac268c670c05a47c3e982c1088d010499c9ae8_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:9ac5ee0b1ffc79c320478d77a24d62789eb7162a564dc0e2be3c0a2ae2ffb272_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c5926bbd0cb2414e4fd0117e11ccec6d33924c2ea255ca7f500419c7886807cf_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ca9d114cccf1e213f392c73a4f36af7efef15bc016636d27fc5c736a933cda14_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:1c422bbe4c19201f0a63dd8175ae962208cbffccf096912858e6274b214994af_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:853f2430db6aceeb634f4c2059947d22547e39978c1185dc48ba3be4f7d337b6_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cd49f834dca7cc30e12add0fb3247d82981f722d353fc15523ad247df8e6d25c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf353c0b22a951c13996d5227406ed75923bf6dbaed9ea50892f32d664003c8d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:99e5e5ef3be5b42ef54d1fbcceac268c670c05a47c3e982c1088d010499c9ae8_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:9ac5ee0b1ffc79c320478d77a24d62789eb7162a564dc0e2be3c0a2ae2ffb272_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c5926bbd0cb2414e4fd0117e11ccec6d33924c2ea255ca7f500419c7886807cf_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ca9d114cccf1e213f392c73a4f36af7efef15bc016636d27fc5c736a933cda14_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name"
},
{
"cve": "CVE-2026-48779",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-16T22:01:24.571224+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2489661"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that consume excessive memory. Consequently, this leads to process termination and a denial of service (DoS) for the remote peer.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `ws` WebSocket library. A remote attacker can exploit this flaw by sending a high volume of small, fragmented data, leading to excessive memory consumption and subsequent process termination. This can result in service disruption for Red Hat products that utilize `ws` for WebSocket communication.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:1c422bbe4c19201f0a63dd8175ae962208cbffccf096912858e6274b214994af_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:853f2430db6aceeb634f4c2059947d22547e39978c1185dc48ba3be4f7d337b6_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cd49f834dca7cc30e12add0fb3247d82981f722d353fc15523ad247df8e6d25c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf353c0b22a951c13996d5227406ed75923bf6dbaed9ea50892f32d664003c8d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:99e5e5ef3be5b42ef54d1fbcceac268c670c05a47c3e982c1088d010499c9ae8_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:9ac5ee0b1ffc79c320478d77a24d62789eb7162a564dc0e2be3c0a2ae2ffb272_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c5926bbd0cb2414e4fd0117e11ccec6d33924c2ea255ca7f500419c7886807cf_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ca9d114cccf1e213f392c73a4f36af7efef15bc016636d27fc5c736a933cda14_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48779"
},
{
"category": "external",
"summary": "RHBZ#2489661",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489661"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48779",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48779"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48779",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48779"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7",
"url": "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53",
"url": "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94",
"url": "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8",
"url": "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p",
"url": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p"
}
],
"release_date": "2026-06-16T21:26:22.537000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T16:41:59+00:00",
"details": "See Kiali 2.11.13 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.1/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:1c422bbe4c19201f0a63dd8175ae962208cbffccf096912858e6274b214994af_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:853f2430db6aceeb634f4c2059947d22547e39978c1185dc48ba3be4f7d337b6_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cd49f834dca7cc30e12add0fb3247d82981f722d353fc15523ad247df8e6d25c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf353c0b22a951c13996d5227406ed75923bf6dbaed9ea50892f32d664003c8d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:99e5e5ef3be5b42ef54d1fbcceac268c670c05a47c3e982c1088d010499c9ae8_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:9ac5ee0b1ffc79c320478d77a24d62789eb7162a564dc0e2be3c0a2ae2ffb272_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c5926bbd0cb2414e4fd0117e11ccec6d33924c2ea255ca7f500419c7886807cf_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ca9d114cccf1e213f392c73a4f36af7efef15bc016636d27fc5c736a933cda14_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33163"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:1c422bbe4c19201f0a63dd8175ae962208cbffccf096912858e6274b214994af_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:853f2430db6aceeb634f4c2059947d22547e39978c1185dc48ba3be4f7d337b6_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cd49f834dca7cc30e12add0fb3247d82981f722d353fc15523ad247df8e6d25c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf353c0b22a951c13996d5227406ed75923bf6dbaed9ea50892f32d664003c8d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:99e5e5ef3be5b42ef54d1fbcceac268c670c05a47c3e982c1088d010499c9ae8_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:9ac5ee0b1ffc79c320478d77a24d62789eb7162a564dc0e2be3c0a2ae2ffb272_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c5926bbd0cb2414e4fd0117e11ccec6d33924c2ea255ca7f500419c7886807cf_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ca9d114cccf1e213f392c73a4f36af7efef15bc016636d27fc5c736a933cda14_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:1c422bbe4c19201f0a63dd8175ae962208cbffccf096912858e6274b214994af_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:853f2430db6aceeb634f4c2059947d22547e39978c1185dc48ba3be4f7d337b6_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cd49f834dca7cc30e12add0fb3247d82981f722d353fc15523ad247df8e6d25c_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf353c0b22a951c13996d5227406ed75923bf6dbaed9ea50892f32d664003c8d_arm64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:99e5e5ef3be5b42ef54d1fbcceac268c670c05a47c3e982c1088d010499c9ae8_ppc64le",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:9ac5ee0b1ffc79c320478d77a24d62789eb7162a564dc0e2be3c0a2ae2ffb272_s390x",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:c5926bbd0cb2414e4fd0117e11ccec6d33924c2ea255ca7f500419c7886807cf_amd64",
"Red Hat OpenShift Service Mesh 3.1:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:ca9d114cccf1e213f392c73a4f36af7efef15bc016636d27fc5c736a933cda14_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments"
}
]
}
RHSA-2026:33173
Vulnerability from csaf_redhat - Published: 2026-06-29 17:10 - Updated: 2026-08-10 09:21Summary
Red Hat Security Advisory: Kiali 2.17.10 for Red Hat OpenShift Service Mesh 3.2
Severity
Important
Notes
Topic: Kiali 2.17.10 for Red Hat OpenShift Service Mesh 3.2 is now available.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Kiali 2.17.10, for Red Hat OpenShift Service Mesh 3.2, provides observability for the service mesh by offering a visual representation of the mesh topology and metrics, helping users monitor, trace, and manage efficiently.
Security Fix(es):
* CVE-2026-42338 openshift-service-mesh/kiali-rhel9: ip-address: Cross-site scripting via improper HTML escaping of untrusted input (OSSM-14062)
* CVE-2026-42338 openshift-service-mesh/kiali-ossmc-rhel9: ip-address: Cross-site scripting via improper HTML escaping of untrusted input (OSSM-14064)
* CVE-2026-39821 openshift-service-mesh/kiali-rhel9: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (OSSM-14074)
* CVE-2026-44495 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Information disclosure due to prototype pollution vulnerability (OSSM-14143)
* CVE-2026-44495 openshift-service-mesh/kiali-rhel9: Axios: Information disclosure due to prototype pollution vulnerability (OSSM-14146)
* CVE-2026-44488 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Denial of Service due to unenforced request and response size limits (OSSM-14158)
* CVE-2026-44488 openshift-service-mesh/kiali-rhel9: Axios: Denial of Service due to unenforced request and response size limits (OSSM-14159)
* CVE-2026-44487 openshift-service-mesh/kiali-rhel9: Axios: Information disclosure of proxy credentials via redirect flows (OSSM-14164)
* CVE-2026-44487 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Information disclosure of proxy credentials via redirect flows (OSSM-14165)
* CVE-2026-44494 openshift-service-mesh/kiali-rhel9: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution (OSSM-14212)
* CVE-2026-44494 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution (OSSM-14203)
* CVE-2026-44496 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name (OSSM-14204)
* CVE-2026-44496 openshift-service-mesh/kiali-rhel9: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name (OSSM-14209)
* CVE-2026-44486 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Information disclosure of proxy credentials via HTTP redirects (OSSM-14193)
* CVE-2026-44486 openshift-service-mesh/kiali-rhel9: Axios: Information disclosure of proxy credentials via HTTP redirects (OSSM-14197)
* CVE-2026-44492 openshift-service-mesh/kiali-rhel9: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization (OSSM-14229)
* CVE-2026-44492 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization (OSSM-14231)
* CVE-2026-48779 openshift-service-mesh/kiali-ossmc-rhel9: ws: Denial of Service via memory exhaustion from small WebSocket fragments (OSSM-14310)
* CVE-2026-48779 openshift-service-mesh/kiali-rhel9: ws: Denial of Service via memory exhaustion from small WebSocket fragments (OSSM-14312)
* CVE-2026-12143 openshift-service-mesh/kiali-rhel9: form-data: Form field override via CRLF injection (OSSM-14329)
* CVE-2026-12143 openshift-service-mesh/kiali-ossmc-rhel9: form-data: Form field override via CRLF injection (OSSM-14332)
* CVE-2026-42264 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Prototype pollution allows information disclosure and request manipulation (OSSM-14594)
* CVE-2026-42264 openshift-service-mesh/kiali-rhel9: Axios: Prototype pollution allows information disclosure and request manipulation (OSSM-14598)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:25cea20e2ae09312237993c254bebc58983e3907469758392d7e97e9859b59c8_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:26fc99e8a9aa85fee4c07b4d77b4c699a41af995888f017ca1ab650d9777f20a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf7b68e5a7e3b4ecbab43eba4196a71b7f859fb6f9a4e11fe9dfd2ad530f684a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:f08bc5caad4465d35f3526bdb1a43c4f56a2a70e6e0f584a291ca8984444bc5f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:28ff05488ce8333b7b2cf2a68f465d0ba085064ba474ccee2652c7e8d4c8f5ab_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:2c2d500314bd8380c4dc06068ac379eadbc8c376bfa232cbf3c7bf1816a0d628_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6cc59e499071fb3a97ecfcdab32b29ed94b3e725d4c0c47f67b096205296e7e3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:790215d0593d974c79ae90cd01d71b8a0f7d872c1b0ad78870d9f2ae28eaff5c_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:28ff05488ce8333b7b2cf2a68f465d0ba085064ba474ccee2652c7e8d4c8f5ab_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:2c2d500314bd8380c4dc06068ac379eadbc8c376bfa232cbf3c7bf1816a0d628_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6cc59e499071fb3a97ecfcdab32b29ed94b3e725d4c0c47f67b096205296e7e3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:790215d0593d974c79ae90cd01d71b8a0f7d872c1b0ad78870d9f2ae28eaff5c_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:25cea20e2ae09312237993c254bebc58983e3907469758392d7e97e9859b59c8_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:26fc99e8a9aa85fee4c07b4d77b4c699a41af995888f017ca1ab650d9777f20a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf7b68e5a7e3b4ecbab43eba4196a71b7f859fb6f9a4e11fe9dfd2ad530f684a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:f08bc5caad4465d35f3526bdb1a43c4f56a2a70e6e0f584a291ca8984444bc5f_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a widely used HTTP client. This vulnerability, known as prototype pollution, allows an attacker to inject malicious properties into core JavaScript objects. When another component in the same application environment is compromised and pollutes the system's object prototype, Axios can unknowingly use these manipulated values in its outbound network requests. This could lead to the disclosure of sensitive information or the alteration of network communications, compromising data confidentiality and integrity.
7.4 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:25cea20e2ae09312237993c254bebc58983e3907469758392d7e97e9859b59c8_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:26fc99e8a9aa85fee4c07b4d77b4c699a41af995888f017ca1ab650d9777f20a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf7b68e5a7e3b4ecbab43eba4196a71b7f859fb6f9a4e11fe9dfd2ad530f684a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:f08bc5caad4465d35f3526bdb1a43c4f56a2a70e6e0f584a291ca8984444bc5f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:28ff05488ce8333b7b2cf2a68f465d0ba085064ba474ccee2652c7e8d4c8f5ab_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:2c2d500314bd8380c4dc06068ac379eadbc8c376bfa232cbf3c7bf1816a0d628_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6cc59e499071fb3a97ecfcdab32b29ed94b3e725d4c0c47f67b096205296e7e3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:790215d0593d974c79ae90cd01d71b8a0f7d872c1b0ad78870d9f2ae28eaff5c_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in ip-address, a JavaScript library for parsing and manipulating IPv4 and IPv6 addresses. This vulnerability allows a remote attacker to perform cross-site scripting (XSS) by providing untrusted input to the Address6 constructor. When an application renders the output of Address6.group(), Address6.link(), or the AddressError.parseMessage as HTML without proper escaping, the attacker-controlled content can be executed in the user's browser.
8.1 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:25cea20e2ae09312237993c254bebc58983e3907469758392d7e97e9859b59c8_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:26fc99e8a9aa85fee4c07b4d77b4c699a41af995888f017ca1ab650d9777f20a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf7b68e5a7e3b4ecbab43eba4196a71b7f859fb6f9a4e11fe9dfd2ad530f684a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:f08bc5caad4465d35f3526bdb1a43c4f56a2a70e6e0f584a291ca8984444bc5f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:28ff05488ce8333b7b2cf2a68f465d0ba085064ba474ccee2652c7e8d4c8f5ab_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:2c2d500314bd8380c4dc06068ac379eadbc8c376bfa232cbf3c7bf1816a0d628_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6cc59e499071fb3a97ecfcdab32b29ed94b3e725d4c0c47f67b096205296e7e3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:790215d0593d974c79ae90cd01d71b8a0f7d872c1b0ad78870d9f2ae28eaff5c_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:25cea20e2ae09312237993c254bebc58983e3907469758392d7e97e9859b59c8_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:26fc99e8a9aa85fee4c07b4d77b4c699a41af995888f017ca1ab650d9777f20a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf7b68e5a7e3b4ecbab43eba4196a71b7f859fb6f9a4e11fe9dfd2ad530f684a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:f08bc5caad4465d35f3526bdb1a43c4f56a2a70e6e0f584a291ca8984444bc5f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:28ff05488ce8333b7b2cf2a68f465d0ba085064ba474ccee2652c7e8d4c8f5ab_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:2c2d500314bd8380c4dc06068ac379eadbc8c376bfa232cbf3c7bf1816a0d628_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6cc59e499071fb3a97ecfcdab32b29ed94b3e725d4c0c47f67b096205296e7e3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:790215d0593d974c79ae90cd01d71b8a0f7d872c1b0ad78870d9f2ae28eaff5c_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:25cea20e2ae09312237993c254bebc58983e3907469758392d7e97e9859b59c8_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:26fc99e8a9aa85fee4c07b4d77b4c699a41af995888f017ca1ab650d9777f20a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf7b68e5a7e3b4ecbab43eba4196a71b7f859fb6f9a4e11fe9dfd2ad530f684a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:f08bc5caad4465d35f3526bdb1a43c4f56a2a70e6e0f584a291ca8984444bc5f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:28ff05488ce8333b7b2cf2a68f465d0ba085064ba474ccee2652c7e8d4c8f5ab_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:2c2d500314bd8380c4dc06068ac379eadbc8c376bfa232cbf3c7bf1816a0d628_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6cc59e499071fb3a97ecfcdab32b29ed94b3e725d4c0c47f67b096205296e7e3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:790215d0593d974c79ae90cd01d71b8a0f7d872c1b0ad78870d9f2ae28eaff5c_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:25cea20e2ae09312237993c254bebc58983e3907469758392d7e97e9859b59c8_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:26fc99e8a9aa85fee4c07b4d77b4c699a41af995888f017ca1ab650d9777f20a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf7b68e5a7e3b4ecbab43eba4196a71b7f859fb6f9a4e11fe9dfd2ad530f684a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:f08bc5caad4465d35f3526bdb1a43c4f56a2a70e6e0f584a291ca8984444bc5f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:28ff05488ce8333b7b2cf2a68f465d0ba085064ba474ccee2652c7e8d4c8f5ab_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:2c2d500314bd8380c4dc06068ac379eadbc8c376bfa232cbf3c7bf1816a0d628_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6cc59e499071fb3a97ecfcdab32b29ed94b3e725d4c0c47f67b096205296e7e3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:790215d0593d974c79ae90cd01d71b8a0f7d872c1b0ad78870d9f2ae28eaff5c_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.
8.6 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:25cea20e2ae09312237993c254bebc58983e3907469758392d7e97e9859b59c8_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:26fc99e8a9aa85fee4c07b4d77b4c699a41af995888f017ca1ab650d9777f20a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf7b68e5a7e3b4ecbab43eba4196a71b7f859fb6f9a4e11fe9dfd2ad530f684a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:f08bc5caad4465d35f3526bdb1a43c4f56a2a70e6e0f584a291ca8984444bc5f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:28ff05488ce8333b7b2cf2a68f465d0ba085064ba474ccee2652c7e8d4c8f5ab_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:2c2d500314bd8380c4dc06068ac379eadbc8c376bfa232cbf3c7bf1816a0d628_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6cc59e499071fb3a97ecfcdab32b29ed94b3e725d4c0c47f67b096205296e7e3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:790215d0593d974c79ae90cd01d71b8a0f7d872c1b0ad78870d9f2ae28eaff5c_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. This vulnerability, a Prototype Pollution "Gadget" attack, allows an attacker to escalate any existing Object.prototype pollution in an application's dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.
8.7 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:25cea20e2ae09312237993c254bebc58983e3907469758392d7e97e9859b59c8_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:26fc99e8a9aa85fee4c07b4d77b4c699a41af995888f017ca1ab650d9777f20a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf7b68e5a7e3b4ecbab43eba4196a71b7f859fb6f9a4e11fe9dfd2ad530f684a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:f08bc5caad4465d35f3526bdb1a43c4f56a2a70e6e0f584a291ca8984444bc5f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:28ff05488ce8333b7b2cf2a68f465d0ba085064ba474ccee2652c7e8d4c8f5ab_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:2c2d500314bd8380c4dc06068ac379eadbc8c376bfa232cbf3c7bf1816a0d628_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6cc59e499071fb3a97ecfcdab32b29ed94b3e725d4c0c47f67b096205296e7e3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:790215d0593d974c79ae90cd01d71b8a0f7d872c1b0ad78870d9f2ae28eaff5c_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.
7.0 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:25cea20e2ae09312237993c254bebc58983e3907469758392d7e97e9859b59c8_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:26fc99e8a9aa85fee4c07b4d77b4c699a41af995888f017ca1ab650d9777f20a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf7b68e5a7e3b4ecbab43eba4196a71b7f859fb6f9a4e11fe9dfd2ad530f684a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:f08bc5caad4465d35f3526bdb1a43c4f56a2a70e6e0f584a291ca8984444bc5f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:28ff05488ce8333b7b2cf2a68f465d0ba085064ba474ccee2652c7e8d4c8f5ab_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:2c2d500314bd8380c4dc06068ac379eadbc8c376bfa232cbf3c7bf1816a0d628_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6cc59e499071fb3a97ecfcdab32b29ed94b3e725d4c0c47f67b096205296e7e3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:790215d0593d974c79ae90cd01d71b8a0f7d872c1b0ad78870d9f2ae28eaff5c_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:25cea20e2ae09312237993c254bebc58983e3907469758392d7e97e9859b59c8_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:26fc99e8a9aa85fee4c07b4d77b4c699a41af995888f017ca1ab650d9777f20a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf7b68e5a7e3b4ecbab43eba4196a71b7f859fb6f9a4e11fe9dfd2ad530f684a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:f08bc5caad4465d35f3526bdb1a43c4f56a2a70e6e0f584a291ca8984444bc5f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:28ff05488ce8333b7b2cf2a68f465d0ba085064ba474ccee2652c7e8d4c8f5ab_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:2c2d500314bd8380c4dc06068ac379eadbc8c376bfa232cbf3c7bf1816a0d628_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6cc59e499071fb3a97ecfcdab32b29ed94b3e725d4c0c47f67b096205296e7e3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:790215d0593d974c79ae90cd01d71b8a0f7d872c1b0ad78870d9f2ae28eaff5c_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that consume excessive memory. Consequently, this leads to process termination and a denial of service (DoS) for the remote peer.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:25cea20e2ae09312237993c254bebc58983e3907469758392d7e97e9859b59c8_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:26fc99e8a9aa85fee4c07b4d77b4c699a41af995888f017ca1ab650d9777f20a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf7b68e5a7e3b4ecbab43eba4196a71b7f859fb6f9a4e11fe9dfd2ad530f684a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:f08bc5caad4465d35f3526bdb1a43c4f56a2a70e6e0f584a291ca8984444bc5f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:28ff05488ce8333b7b2cf2a68f465d0ba085064ba474ccee2652c7e8d4c8f5ab_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:2c2d500314bd8380c4dc06068ac379eadbc8c376bfa232cbf3c7bf1816a0d628_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6cc59e499071fb3a97ecfcdab32b29ed94b3e725d4c0c47f67b096205296e7e3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:790215d0593d974c79ae90cd01d71b8a0f7d872c1b0ad78870d9f2ae28eaff5c_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
92 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Kiali 2.17.10 for Red Hat OpenShift Service Mesh 3.2 is now available.\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Kiali 2.17.10, for Red Hat OpenShift Service Mesh 3.2, provides observability for the service mesh by offering a visual representation of the mesh topology and metrics, helping users monitor, trace, and manage efficiently.\n\nSecurity Fix(es):\n\n* CVE-2026-42338 openshift-service-mesh/kiali-rhel9: ip-address: Cross-site scripting via improper HTML escaping of untrusted input (OSSM-14062)\n* CVE-2026-42338 openshift-service-mesh/kiali-ossmc-rhel9: ip-address: Cross-site scripting via improper HTML escaping of untrusted input (OSSM-14064)\n* CVE-2026-39821 openshift-service-mesh/kiali-rhel9: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (OSSM-14074)\n* CVE-2026-44495 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Information disclosure due to prototype pollution vulnerability (OSSM-14143)\n* CVE-2026-44495 openshift-service-mesh/kiali-rhel9: Axios: Information disclosure due to prototype pollution vulnerability (OSSM-14146)\n* CVE-2026-44488 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Denial of Service due to unenforced request and response size limits (OSSM-14158)\n* CVE-2026-44488 openshift-service-mesh/kiali-rhel9: Axios: Denial of Service due to unenforced request and response size limits (OSSM-14159)\n* CVE-2026-44487 openshift-service-mesh/kiali-rhel9: Axios: Information disclosure of proxy credentials via redirect flows (OSSM-14164)\n* CVE-2026-44487 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Information disclosure of proxy credentials via redirect flows (OSSM-14165)\n* CVE-2026-44494 openshift-service-mesh/kiali-rhel9: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution (OSSM-14212)\n* CVE-2026-44494 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution (OSSM-14203)\n* CVE-2026-44496 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name (OSSM-14204)\n* CVE-2026-44496 openshift-service-mesh/kiali-rhel9: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name (OSSM-14209)\n* CVE-2026-44486 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Information disclosure of proxy credentials via HTTP redirects (OSSM-14193)\n* CVE-2026-44486 openshift-service-mesh/kiali-rhel9: Axios: Information disclosure of proxy credentials via HTTP redirects (OSSM-14197)\n* CVE-2026-44492 openshift-service-mesh/kiali-rhel9: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization (OSSM-14229)\n* CVE-2026-44492 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization (OSSM-14231)\n* CVE-2026-48779 openshift-service-mesh/kiali-ossmc-rhel9: ws: Denial of Service via memory exhaustion from small WebSocket fragments (OSSM-14310)\n* CVE-2026-48779 openshift-service-mesh/kiali-rhel9: ws: Denial of Service via memory exhaustion from small WebSocket fragments (OSSM-14312)\n* CVE-2026-12143 openshift-service-mesh/kiali-rhel9: form-data: Form field override via CRLF injection (OSSM-14329)\n* CVE-2026-12143 openshift-service-mesh/kiali-ossmc-rhel9: form-data: Form field override via CRLF injection (OSSM-14332)\n* CVE-2026-42264 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Prototype pollution allows information disclosure and request manipulation (OSSM-14594)\n* CVE-2026-42264 openshift-service-mesh/kiali-rhel9: Axios: Prototype pollution allows information disclosure and request manipulation (OSSM-14598)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:33173",
"url": "https://access.redhat.com/errata/RHSA-2026:33173"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-12143",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42264",
"url": "https://access.redhat.com/security/cve/CVE-2026-42264"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42338",
"url": "https://access.redhat.com/security/cve/CVE-2026-42338"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44486",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44487",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44488",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44492",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44494",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44495",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44496",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-48779",
"url": "https://access.redhat.com/security/cve/CVE-2026-48779"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification",
"url": "https://access.redhat.com/security/updates/classification"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_33173.json"
}
],
"title": "Red Hat Security Advisory: Kiali 2.17.10 for Red Hat OpenShift Service Mesh 3.2",
"tracking": {
"current_release_date": "2026-08-10T09:21:10+00:00",
"generator": {
"date": "2026-08-10T09:21:10+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.12"
}
},
"id": "RHSA-2026:33173",
"initial_release_date": "2026-06-29T17:10:36+00:00",
"revision_history": [
{
"date": "2026-06-29T17:10:36+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-08T04:36:23+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-10T09:21:10+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Service Mesh 3.2",
"product": {
"name": "Red Hat OpenShift Service Mesh 3.2",
"product_id": "Red Hat OpenShift Service Mesh 3.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:service_mesh:3.2::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Service Mesh"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6cc59e499071fb3a97ecfcdab32b29ed94b3e725d4c0c47f67b096205296e7e3_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6cc59e499071fb3a97ecfcdab32b29ed94b3e725d4c0c47f67b096205296e7e3_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6cc59e499071fb3a97ecfcdab32b29ed94b3e725d4c0c47f67b096205296e7e3_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9@sha256%3A6cc59e499071fb3a97ecfcdab32b29ed94b3e725d4c0c47f67b096205296e7e3?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-rhel9\u0026tag=1782201812"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:26fc99e8a9aa85fee4c07b4d77b4c699a41af995888f017ca1ab650d9777f20a_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:26fc99e8a9aa85fee4c07b4d77b4c699a41af995888f017ca1ab650d9777f20a_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:26fc99e8a9aa85fee4c07b4d77b4c699a41af995888f017ca1ab650d9777f20a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel9@sha256%3A26fc99e8a9aa85fee4c07b4d77b4c699a41af995888f017ca1ab650d9777f20a?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9\u0026tag=1782201851"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:790215d0593d974c79ae90cd01d71b8a0f7d872c1b0ad78870d9f2ae28eaff5c_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:790215d0593d974c79ae90cd01d71b8a0f7d872c1b0ad78870d9f2ae28eaff5c_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:790215d0593d974c79ae90cd01d71b8a0f7d872c1b0ad78870d9f2ae28eaff5c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9@sha256%3A790215d0593d974c79ae90cd01d71b8a0f7d872c1b0ad78870d9f2ae28eaff5c?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-rhel9\u0026tag=1782201812"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf7b68e5a7e3b4ecbab43eba4196a71b7f859fb6f9a4e11fe9dfd2ad530f684a_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf7b68e5a7e3b4ecbab43eba4196a71b7f859fb6f9a4e11fe9dfd2ad530f684a_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf7b68e5a7e3b4ecbab43eba4196a71b7f859fb6f9a4e11fe9dfd2ad530f684a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel9@sha256%3Acf7b68e5a7e3b4ecbab43eba4196a71b7f859fb6f9a4e11fe9dfd2ad530f684a?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9\u0026tag=1782201851"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:2c2d500314bd8380c4dc06068ac379eadbc8c376bfa232cbf3c7bf1816a0d628_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:2c2d500314bd8380c4dc06068ac379eadbc8c376bfa232cbf3c7bf1816a0d628_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:2c2d500314bd8380c4dc06068ac379eadbc8c376bfa232cbf3c7bf1816a0d628_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9@sha256%3A2c2d500314bd8380c4dc06068ac379eadbc8c376bfa232cbf3c7bf1816a0d628?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-rhel9\u0026tag=1782201812"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:f08bc5caad4465d35f3526bdb1a43c4f56a2a70e6e0f584a291ca8984444bc5f_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:f08bc5caad4465d35f3526bdb1a43c4f56a2a70e6e0f584a291ca8984444bc5f_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:f08bc5caad4465d35f3526bdb1a43c4f56a2a70e6e0f584a291ca8984444bc5f_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel9@sha256%3Af08bc5caad4465d35f3526bdb1a43c4f56a2a70e6e0f584a291ca8984444bc5f?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9\u0026tag=1782201851"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:28ff05488ce8333b7b2cf2a68f465d0ba085064ba474ccee2652c7e8d4c8f5ab_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:28ff05488ce8333b7b2cf2a68f465d0ba085064ba474ccee2652c7e8d4c8f5ab_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:28ff05488ce8333b7b2cf2a68f465d0ba085064ba474ccee2652c7e8d4c8f5ab_s390x",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9@sha256%3A28ff05488ce8333b7b2cf2a68f465d0ba085064ba474ccee2652c7e8d4c8f5ab?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-rhel9\u0026tag=1782201812"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:25cea20e2ae09312237993c254bebc58983e3907469758392d7e97e9859b59c8_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:25cea20e2ae09312237993c254bebc58983e3907469758392d7e97e9859b59c8_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:25cea20e2ae09312237993c254bebc58983e3907469758392d7e97e9859b59c8_s390x",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel9@sha256%3A25cea20e2ae09312237993c254bebc58983e3907469758392d7e97e9859b59c8?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9\u0026tag=1782201851"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:25cea20e2ae09312237993c254bebc58983e3907469758392d7e97e9859b59c8_s390x as a component of Red Hat OpenShift Service Mesh 3.2",
"product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:25cea20e2ae09312237993c254bebc58983e3907469758392d7e97e9859b59c8_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:25cea20e2ae09312237993c254bebc58983e3907469758392d7e97e9859b59c8_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:26fc99e8a9aa85fee4c07b4d77b4c699a41af995888f017ca1ab650d9777f20a_amd64 as a component of Red Hat OpenShift Service Mesh 3.2",
"product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:26fc99e8a9aa85fee4c07b4d77b4c699a41af995888f017ca1ab650d9777f20a_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:26fc99e8a9aa85fee4c07b4d77b4c699a41af995888f017ca1ab650d9777f20a_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf7b68e5a7e3b4ecbab43eba4196a71b7f859fb6f9a4e11fe9dfd2ad530f684a_arm64 as a component of Red Hat OpenShift Service Mesh 3.2",
"product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf7b68e5a7e3b4ecbab43eba4196a71b7f859fb6f9a4e11fe9dfd2ad530f684a_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf7b68e5a7e3b4ecbab43eba4196a71b7f859fb6f9a4e11fe9dfd2ad530f684a_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:f08bc5caad4465d35f3526bdb1a43c4f56a2a70e6e0f584a291ca8984444bc5f_ppc64le as a component of Red Hat OpenShift Service Mesh 3.2",
"product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:f08bc5caad4465d35f3526bdb1a43c4f56a2a70e6e0f584a291ca8984444bc5f_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:f08bc5caad4465d35f3526bdb1a43c4f56a2a70e6e0f584a291ca8984444bc5f_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:28ff05488ce8333b7b2cf2a68f465d0ba085064ba474ccee2652c7e8d4c8f5ab_s390x as a component of Red Hat OpenShift Service Mesh 3.2",
"product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:28ff05488ce8333b7b2cf2a68f465d0ba085064ba474ccee2652c7e8d4c8f5ab_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:28ff05488ce8333b7b2cf2a68f465d0ba085064ba474ccee2652c7e8d4c8f5ab_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:2c2d500314bd8380c4dc06068ac379eadbc8c376bfa232cbf3c7bf1816a0d628_ppc64le as a component of Red Hat OpenShift Service Mesh 3.2",
"product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:2c2d500314bd8380c4dc06068ac379eadbc8c376bfa232cbf3c7bf1816a0d628_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:2c2d500314bd8380c4dc06068ac379eadbc8c376bfa232cbf3c7bf1816a0d628_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6cc59e499071fb3a97ecfcdab32b29ed94b3e725d4c0c47f67b096205296e7e3_amd64 as a component of Red Hat OpenShift Service Mesh 3.2",
"product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6cc59e499071fb3a97ecfcdab32b29ed94b3e725d4c0c47f67b096205296e7e3_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6cc59e499071fb3a97ecfcdab32b29ed94b3e725d4c0c47f67b096205296e7e3_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:790215d0593d974c79ae90cd01d71b8a0f7d872c1b0ad78870d9f2ae28eaff5c_arm64 as a component of Red Hat OpenShift Service Mesh 3.2",
"product_id": "Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:790215d0593d974c79ae90cd01d71b8a0f7d872c1b0ad78870d9f2ae28eaff5c_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:790215d0593d974c79ae90cd01d71b8a0f7d872c1b0ad78870d9f2ae28eaff5c_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-12143",
"cwe": {
"id": "CWE-93",
"name": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
},
"discovery_date": "2026-06-12T19:00:57.360953+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488480"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (\") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "form-data: form-data: Form field override via CRLF injection",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important impact flaw in the form-data library: a remote attacker can inject arbitrary headers or additional multipart parts via CRLF injection in field names or filenames, potentially overriding sensitive form fields and affecting data integrity.\n\nFor RHOAI and RHEL AI, severity is Moderate because affected versions appear only as a transitive npm dependency in RHOAI (dashboard, mod-arch plugins, MLflow UI) and RHEL AI 3.4 bootc images, and those products use fixed field names for uploads rather than passing untrusted user input as multipart field names or filenames. The documented exploit path is therefore not reachable in default deployments. Practical impact is limited to non-default or custom integrations that forward multipart requests using attacker-controlled field names.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:25cea20e2ae09312237993c254bebc58983e3907469758392d7e97e9859b59c8_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:26fc99e8a9aa85fee4c07b4d77b4c699a41af995888f017ca1ab650d9777f20a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf7b68e5a7e3b4ecbab43eba4196a71b7f859fb6f9a4e11fe9dfd2ad530f684a_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:f08bc5caad4465d35f3526bdb1a43c4f56a2a70e6e0f584a291ca8984444bc5f_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:28ff05488ce8333b7b2cf2a68f465d0ba085064ba474ccee2652c7e8d4c8f5ab_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:2c2d500314bd8380c4dc06068ac379eadbc8c376bfa232cbf3c7bf1816a0d628_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6cc59e499071fb3a97ecfcdab32b29ed94b3e725d4c0c47f67b096205296e7e3_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:790215d0593d974c79ae90cd01d71b8a0f7d872c1b0ad78870d9f2ae28eaff5c_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "RHBZ#2488480",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488480"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12143",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12143"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://cwe.mitre.org/data/definitions/93.html",
"url": "https://cwe.mitre.org/data/definitions/93.html"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435",
"url": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229",
"url": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045",
"url": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx",
"url": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx"
},
{
"category": "external",
"summary": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data",
"url": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/form-data",
"url": "https://www.npmjs.com/package/form-data"
}
],
"release_date": "2026-06-12T18:01:30.362000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T17:10:36+00:00",
"details": "See Kiali 2.17.10 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.2/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:25cea20e2ae09312237993c254bebc58983e3907469758392d7e97e9859b59c8_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:26fc99e8a9aa85fee4c07b4d77b4c699a41af995888f017ca1ab650d9777f20a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf7b68e5a7e3b4ecbab43eba4196a71b7f859fb6f9a4e11fe9dfd2ad530f684a_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:f08bc5caad4465d35f3526bdb1a43c4f56a2a70e6e0f584a291ca8984444bc5f_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:28ff05488ce8333b7b2cf2a68f465d0ba085064ba474ccee2652c7e8d4c8f5ab_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:2c2d500314bd8380c4dc06068ac379eadbc8c376bfa232cbf3c7bf1816a0d628_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6cc59e499071fb3a97ecfcdab32b29ed94b3e725d4c0c47f67b096205296e7e3_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:790215d0593d974c79ae90cd01d71b8a0f7d872c1b0ad78870d9f2ae28eaff5c_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33173"
},
{
"category": "workaround",
"details": "Applications using the `form-data` library should implement strict input validation and sanitization for all field names and filenames derived from untrusted sources. This prevents the injection of control characters (CR, LF, \") that could lead to header injection or form field overrides. Deployments that exclusively use fixed or trusted field names are not impacted.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:25cea20e2ae09312237993c254bebc58983e3907469758392d7e97e9859b59c8_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:26fc99e8a9aa85fee4c07b4d77b4c699a41af995888f017ca1ab650d9777f20a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf7b68e5a7e3b4ecbab43eba4196a71b7f859fb6f9a4e11fe9dfd2ad530f684a_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:f08bc5caad4465d35f3526bdb1a43c4f56a2a70e6e0f584a291ca8984444bc5f_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:28ff05488ce8333b7b2cf2a68f465d0ba085064ba474ccee2652c7e8d4c8f5ab_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:2c2d500314bd8380c4dc06068ac379eadbc8c376bfa232cbf3c7bf1816a0d628_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6cc59e499071fb3a97ecfcdab32b29ed94b3e725d4c0c47f67b096205296e7e3_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:790215d0593d974c79ae90cd01d71b8a0f7d872c1b0ad78870d9f2ae28eaff5c_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:25cea20e2ae09312237993c254bebc58983e3907469758392d7e97e9859b59c8_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:26fc99e8a9aa85fee4c07b4d77b4c699a41af995888f017ca1ab650d9777f20a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf7b68e5a7e3b4ecbab43eba4196a71b7f859fb6f9a4e11fe9dfd2ad530f684a_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:f08bc5caad4465d35f3526bdb1a43c4f56a2a70e6e0f584a291ca8984444bc5f_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:28ff05488ce8333b7b2cf2a68f465d0ba085064ba474ccee2652c7e8d4c8f5ab_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:2c2d500314bd8380c4dc06068ac379eadbc8c376bfa232cbf3c7bf1816a0d628_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6cc59e499071fb3a97ecfcdab32b29ed94b3e725d4c0c47f67b096205296e7e3_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:790215d0593d974c79ae90cd01d71b8a0f7d872c1b0ad78870d9f2ae28eaff5c_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "form-data: form-data: Form field override via CRLF injection"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:25cea20e2ae09312237993c254bebc58983e3907469758392d7e97e9859b59c8_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:26fc99e8a9aa85fee4c07b4d77b4c699a41af995888f017ca1ab650d9777f20a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf7b68e5a7e3b4ecbab43eba4196a71b7f859fb6f9a4e11fe9dfd2ad530f684a_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:f08bc5caad4465d35f3526bdb1a43c4f56a2a70e6e0f584a291ca8984444bc5f_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:28ff05488ce8333b7b2cf2a68f465d0ba085064ba474ccee2652c7e8d4c8f5ab_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:2c2d500314bd8380c4dc06068ac379eadbc8c376bfa232cbf3c7bf1816a0d628_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6cc59e499071fb3a97ecfcdab32b29ed94b3e725d4c0c47f67b096205296e7e3_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:790215d0593d974c79ae90cd01d71b8a0f7d872c1b0ad78870d9f2ae28eaff5c_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:25cea20e2ae09312237993c254bebc58983e3907469758392d7e97e9859b59c8_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:26fc99e8a9aa85fee4c07b4d77b4c699a41af995888f017ca1ab650d9777f20a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf7b68e5a7e3b4ecbab43eba4196a71b7f859fb6f9a4e11fe9dfd2ad530f684a_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:f08bc5caad4465d35f3526bdb1a43c4f56a2a70e6e0f584a291ca8984444bc5f_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T17:10:36+00:00",
"details": "See Kiali 2.17.10 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.2/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:28ff05488ce8333b7b2cf2a68f465d0ba085064ba474ccee2652c7e8d4c8f5ab_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:2c2d500314bd8380c4dc06068ac379eadbc8c376bfa232cbf3c7bf1816a0d628_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6cc59e499071fb3a97ecfcdab32b29ed94b3e725d4c0c47f67b096205296e7e3_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:790215d0593d974c79ae90cd01d71b8a0f7d872c1b0ad78870d9f2ae28eaff5c_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33173"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:25cea20e2ae09312237993c254bebc58983e3907469758392d7e97e9859b59c8_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:26fc99e8a9aa85fee4c07b4d77b4c699a41af995888f017ca1ab650d9777f20a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf7b68e5a7e3b4ecbab43eba4196a71b7f859fb6f9a4e11fe9dfd2ad530f684a_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:f08bc5caad4465d35f3526bdb1a43c4f56a2a70e6e0f584a291ca8984444bc5f_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:28ff05488ce8333b7b2cf2a68f465d0ba085064ba474ccee2652c7e8d4c8f5ab_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:2c2d500314bd8380c4dc06068ac379eadbc8c376bfa232cbf3c7bf1816a0d628_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6cc59e499071fb3a97ecfcdab32b29ed94b3e725d4c0c47f67b096205296e7e3_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:790215d0593d974c79ae90cd01d71b8a0f7d872c1b0ad78870d9f2ae28eaff5c_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:25cea20e2ae09312237993c254bebc58983e3907469758392d7e97e9859b59c8_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:26fc99e8a9aa85fee4c07b4d77b4c699a41af995888f017ca1ab650d9777f20a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf7b68e5a7e3b4ecbab43eba4196a71b7f859fb6f9a4e11fe9dfd2ad530f684a_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:f08bc5caad4465d35f3526bdb1a43c4f56a2a70e6e0f584a291ca8984444bc5f_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:28ff05488ce8333b7b2cf2a68f465d0ba085064ba474ccee2652c7e8d4c8f5ab_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:2c2d500314bd8380c4dc06068ac379eadbc8c376bfa232cbf3c7bf1816a0d628_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6cc59e499071fb3a97ecfcdab32b29ed94b3e725d4c0c47f67b096205296e7e3_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:790215d0593d974c79ae90cd01d71b8a0f7d872c1b0ad78870d9f2ae28eaff5c_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-42264",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-05-08T04:02:21.039378+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467927"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a widely used HTTP client. This vulnerability, known as prototype pollution, allows an attacker to inject malicious properties into core JavaScript objects. When another component in the same application environment is compromised and pollutes the system\u0027s object prototype, Axios can unknowingly use these manipulated values in its outbound network requests. This could lead to the disclosure of sensitive information or the alteration of network communications, compromising data confidentiality and integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Prototype pollution allows information disclosure and request manipulation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important prototype pollution flaw in Axios could result in information disclosure and network request manipulation. The vulnerability occurs when a co-located dependency in the application environment successfully pollutes the JavaScript `Object.prototype`. Under these conditions, Axios may unknowingly incorporate the manipulated properties into its outbound HTTP requests, potentially compromising data confidentiality and integrity. Exploitation is contingent on a prior successful prototype pollution attack from another component.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:25cea20e2ae09312237993c254bebc58983e3907469758392d7e97e9859b59c8_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:26fc99e8a9aa85fee4c07b4d77b4c699a41af995888f017ca1ab650d9777f20a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf7b68e5a7e3b4ecbab43eba4196a71b7f859fb6f9a4e11fe9dfd2ad530f684a_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:f08bc5caad4465d35f3526bdb1a43c4f56a2a70e6e0f584a291ca8984444bc5f_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:28ff05488ce8333b7b2cf2a68f465d0ba085064ba474ccee2652c7e8d4c8f5ab_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:2c2d500314bd8380c4dc06068ac379eadbc8c376bfa232cbf3c7bf1816a0d628_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6cc59e499071fb3a97ecfcdab32b29ed94b3e725d4c0c47f67b096205296e7e3_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:790215d0593d974c79ae90cd01d71b8a0f7d872c1b0ad78870d9f2ae28eaff5c_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42264"
},
{
"category": "external",
"summary": "RHBZ#2467927",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467927"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42264",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42264"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42264",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42264"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/commit/47915144662f2733e6c051bdcb895a8c8f0586aa",
"url": "https://github.com/axios/axios/commit/47915144662f2733e6c051bdcb895a8c8f0586aa"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/pull/10779",
"url": "https://github.com/axios/axios/pull/10779"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/releases/tag/v1.15.2",
"url": "https://github.com/axios/axios/releases/tag/v1.15.2"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-q8qp-cvcw-x6jj",
"url": "https://github.com/axios/axios/security/advisories/GHSA-q8qp-cvcw-x6jj"
}
],
"release_date": "2026-05-08T03:20:24.248000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T17:10:36+00:00",
"details": "See Kiali 2.17.10 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.2/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:25cea20e2ae09312237993c254bebc58983e3907469758392d7e97e9859b59c8_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:26fc99e8a9aa85fee4c07b4d77b4c699a41af995888f017ca1ab650d9777f20a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf7b68e5a7e3b4ecbab43eba4196a71b7f859fb6f9a4e11fe9dfd2ad530f684a_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:f08bc5caad4465d35f3526bdb1a43c4f56a2a70e6e0f584a291ca8984444bc5f_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:28ff05488ce8333b7b2cf2a68f465d0ba085064ba474ccee2652c7e8d4c8f5ab_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:2c2d500314bd8380c4dc06068ac379eadbc8c376bfa232cbf3c7bf1816a0d628_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6cc59e499071fb3a97ecfcdab32b29ed94b3e725d4c0c47f67b096205296e7e3_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:790215d0593d974c79ae90cd01d71b8a0f7d872c1b0ad78870d9f2ae28eaff5c_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33173"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:25cea20e2ae09312237993c254bebc58983e3907469758392d7e97e9859b59c8_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:26fc99e8a9aa85fee4c07b4d77b4c699a41af995888f017ca1ab650d9777f20a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf7b68e5a7e3b4ecbab43eba4196a71b7f859fb6f9a4e11fe9dfd2ad530f684a_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:f08bc5caad4465d35f3526bdb1a43c4f56a2a70e6e0f584a291ca8984444bc5f_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:28ff05488ce8333b7b2cf2a68f465d0ba085064ba474ccee2652c7e8d4c8f5ab_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:2c2d500314bd8380c4dc06068ac379eadbc8c376bfa232cbf3c7bf1816a0d628_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6cc59e499071fb3a97ecfcdab32b29ed94b3e725d4c0c47f67b096205296e7e3_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:790215d0593d974c79ae90cd01d71b8a0f7d872c1b0ad78870d9f2ae28eaff5c_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:25cea20e2ae09312237993c254bebc58983e3907469758392d7e97e9859b59c8_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:26fc99e8a9aa85fee4c07b4d77b4c699a41af995888f017ca1ab650d9777f20a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf7b68e5a7e3b4ecbab43eba4196a71b7f859fb6f9a4e11fe9dfd2ad530f684a_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:f08bc5caad4465d35f3526bdb1a43c4f56a2a70e6e0f584a291ca8984444bc5f_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:28ff05488ce8333b7b2cf2a68f465d0ba085064ba474ccee2652c7e8d4c8f5ab_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:2c2d500314bd8380c4dc06068ac379eadbc8c376bfa232cbf3c7bf1816a0d628_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6cc59e499071fb3a97ecfcdab32b29ed94b3e725d4c0c47f67b096205296e7e3_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:790215d0593d974c79ae90cd01d71b8a0f7d872c1b0ad78870d9f2ae28eaff5c_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Prototype pollution allows information disclosure and request manipulation"
},
{
"cve": "CVE-2026-42338",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-12T21:01:14.436876+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2476810"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ip-address, a JavaScript library for parsing and manipulating IPv4 and IPv6 addresses. This vulnerability allows a remote attacker to perform cross-site scripting (XSS) by providing untrusted input to the Address6 constructor. When an application renders the output of Address6.group(), Address6.link(), or the AddressError.parseMessage as HTML without proper escaping, the attacker-controlled content can be executed in the user\u0027s browser.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in the `ip-address` JavaScript library is rated as Important. It allows for cross-site scripting (XSS) when an application processes untrusted input through the `Address6` constructor and subsequently renders the unescaped output of methods like `Address6.group()`, `Address6.link()`, or `AddressError.parseMessage` directly as HTML. While the library itself is affected, exploitation is contingent on specific application-level rendering practices that may not be common in Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:25cea20e2ae09312237993c254bebc58983e3907469758392d7e97e9859b59c8_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:26fc99e8a9aa85fee4c07b4d77b4c699a41af995888f017ca1ab650d9777f20a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf7b68e5a7e3b4ecbab43eba4196a71b7f859fb6f9a4e11fe9dfd2ad530f684a_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:f08bc5caad4465d35f3526bdb1a43c4f56a2a70e6e0f584a291ca8984444bc5f_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:28ff05488ce8333b7b2cf2a68f465d0ba085064ba474ccee2652c7e8d4c8f5ab_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:2c2d500314bd8380c4dc06068ac379eadbc8c376bfa232cbf3c7bf1816a0d628_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6cc59e499071fb3a97ecfcdab32b29ed94b3e725d4c0c47f67b096205296e7e3_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:790215d0593d974c79ae90cd01d71b8a0f7d872c1b0ad78870d9f2ae28eaff5c_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42338"
},
{
"category": "external",
"summary": "RHBZ#2476810",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2476810"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42338",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42338"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42338",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42338"
},
{
"category": "external",
"summary": "https://github.com/beaugunderson/ip-address/security/advisories/GHSA-v2v4-37r5-5v8g",
"url": "https://github.com/beaugunderson/ip-address/security/advisories/GHSA-v2v4-37r5-5v8g"
}
],
"release_date": "2026-05-12T19:43:16.470000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T17:10:36+00:00",
"details": "See Kiali 2.17.10 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.2/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:25cea20e2ae09312237993c254bebc58983e3907469758392d7e97e9859b59c8_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:26fc99e8a9aa85fee4c07b4d77b4c699a41af995888f017ca1ab650d9777f20a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf7b68e5a7e3b4ecbab43eba4196a71b7f859fb6f9a4e11fe9dfd2ad530f684a_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:f08bc5caad4465d35f3526bdb1a43c4f56a2a70e6e0f584a291ca8984444bc5f_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:28ff05488ce8333b7b2cf2a68f465d0ba085064ba474ccee2652c7e8d4c8f5ab_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:2c2d500314bd8380c4dc06068ac379eadbc8c376bfa232cbf3c7bf1816a0d628_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6cc59e499071fb3a97ecfcdab32b29ed94b3e725d4c0c47f67b096205296e7e3_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:790215d0593d974c79ae90cd01d71b8a0f7d872c1b0ad78870d9f2ae28eaff5c_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33173"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:25cea20e2ae09312237993c254bebc58983e3907469758392d7e97e9859b59c8_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:26fc99e8a9aa85fee4c07b4d77b4c699a41af995888f017ca1ab650d9777f20a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf7b68e5a7e3b4ecbab43eba4196a71b7f859fb6f9a4e11fe9dfd2ad530f684a_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:f08bc5caad4465d35f3526bdb1a43c4f56a2a70e6e0f584a291ca8984444bc5f_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:28ff05488ce8333b7b2cf2a68f465d0ba085064ba474ccee2652c7e8d4c8f5ab_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:2c2d500314bd8380c4dc06068ac379eadbc8c376bfa232cbf3c7bf1816a0d628_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6cc59e499071fb3a97ecfcdab32b29ed94b3e725d4c0c47f67b096205296e7e3_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:790215d0593d974c79ae90cd01d71b8a0f7d872c1b0ad78870d9f2ae28eaff5c_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:25cea20e2ae09312237993c254bebc58983e3907469758392d7e97e9859b59c8_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:26fc99e8a9aa85fee4c07b4d77b4c699a41af995888f017ca1ab650d9777f20a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf7b68e5a7e3b4ecbab43eba4196a71b7f859fb6f9a4e11fe9dfd2ad530f684a_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:f08bc5caad4465d35f3526bdb1a43c4f56a2a70e6e0f584a291ca8984444bc5f_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:28ff05488ce8333b7b2cf2a68f465d0ba085064ba474ccee2652c7e8d4c8f5ab_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:2c2d500314bd8380c4dc06068ac379eadbc8c376bfa232cbf3c7bf1816a0d628_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6cc59e499071fb3a97ecfcdab32b29ed94b3e725d4c0c47f67b096205296e7e3_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:790215d0593d974c79ae90cd01d71b8a0f7d872c1b0ad78870d9f2ae28eaff5c_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input"
},
{
"cve": "CVE-2026-44486",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:30.944384+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487947"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in the Axios Node.js HTTP adapter. Red Hat products utilizing Axios in a Node.js environment with an authenticated proxy and automatic redirects enabled are susceptible. The vulnerability arises when a request, initially sent through an authenticated proxy, is redirected to a target that no longer uses the proxy, potentially leaking `Proxy-Authorization` headers containing sensitive credentials to an untrusted remote server. This risk is heightened in deployments where applications interact with untrusted HTTP origins.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:25cea20e2ae09312237993c254bebc58983e3907469758392d7e97e9859b59c8_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:26fc99e8a9aa85fee4c07b4d77b4c699a41af995888f017ca1ab650d9777f20a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf7b68e5a7e3b4ecbab43eba4196a71b7f859fb6f9a4e11fe9dfd2ad530f684a_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:f08bc5caad4465d35f3526bdb1a43c4f56a2a70e6e0f584a291ca8984444bc5f_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:28ff05488ce8333b7b2cf2a68f465d0ba085064ba474ccee2652c7e8d4c8f5ab_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:2c2d500314bd8380c4dc06068ac379eadbc8c376bfa232cbf3c7bf1816a0d628_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6cc59e499071fb3a97ecfcdab32b29ed94b3e725d4c0c47f67b096205296e7e3_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:790215d0593d974c79ae90cd01d71b8a0f7d872c1b0ad78870d9f2ae28eaff5c_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "RHBZ#2487947",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487947"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44486",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44486"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc",
"url": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc"
}
],
"release_date": "2026-06-11T15:39:07.714000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T17:10:36+00:00",
"details": "See Kiali 2.17.10 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.2/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:25cea20e2ae09312237993c254bebc58983e3907469758392d7e97e9859b59c8_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:26fc99e8a9aa85fee4c07b4d77b4c699a41af995888f017ca1ab650d9777f20a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf7b68e5a7e3b4ecbab43eba4196a71b7f859fb6f9a4e11fe9dfd2ad530f684a_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:f08bc5caad4465d35f3526bdb1a43c4f56a2a70e6e0f584a291ca8984444bc5f_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:28ff05488ce8333b7b2cf2a68f465d0ba085064ba474ccee2652c7e8d4c8f5ab_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:2c2d500314bd8380c4dc06068ac379eadbc8c376bfa232cbf3c7bf1816a0d628_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6cc59e499071fb3a97ecfcdab32b29ed94b3e725d4c0c47f67b096205296e7e3_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:790215d0593d974c79ae90cd01d71b8a0f7d872c1b0ad78870d9f2ae28eaff5c_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33173"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:25cea20e2ae09312237993c254bebc58983e3907469758392d7e97e9859b59c8_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:26fc99e8a9aa85fee4c07b4d77b4c699a41af995888f017ca1ab650d9777f20a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf7b68e5a7e3b4ecbab43eba4196a71b7f859fb6f9a4e11fe9dfd2ad530f684a_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:f08bc5caad4465d35f3526bdb1a43c4f56a2a70e6e0f584a291ca8984444bc5f_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:28ff05488ce8333b7b2cf2a68f465d0ba085064ba474ccee2652c7e8d4c8f5ab_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:2c2d500314bd8380c4dc06068ac379eadbc8c376bfa232cbf3c7bf1816a0d628_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6cc59e499071fb3a97ecfcdab32b29ed94b3e725d4c0c47f67b096205296e7e3_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:790215d0593d974c79ae90cd01d71b8a0f7d872c1b0ad78870d9f2ae28eaff5c_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:25cea20e2ae09312237993c254bebc58983e3907469758392d7e97e9859b59c8_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:26fc99e8a9aa85fee4c07b4d77b4c699a41af995888f017ca1ab650d9777f20a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf7b68e5a7e3b4ecbab43eba4196a71b7f859fb6f9a4e11fe9dfd2ad530f684a_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:f08bc5caad4465d35f3526bdb1a43c4f56a2a70e6e0f584a291ca8984444bc5f_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:28ff05488ce8333b7b2cf2a68f465d0ba085064ba474ccee2652c7e8d4c8f5ab_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:2c2d500314bd8380c4dc06068ac379eadbc8c376bfa232cbf3c7bf1816a0d628_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6cc59e499071fb3a97ecfcdab32b29ed94b3e725d4c0c47f67b096205296e7e3_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:790215d0593d974c79ae90cd01d71b8a0f7d872c1b0ad78870d9f2ae28eaff5c_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects"
},
{
"cve": "CVE-2026-44487",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:34.091476+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487948"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via redirect flows",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in Axios affecting Node.js environments. When an application uses Axios with an authenticated HTTP proxy and follows redirects from an HTTP to a non-proxied HTTPS destination, the Proxy-Authorization header may be inadvertently sent to the final origin server. This could lead to the exposure of sensitive proxy credentials to an unintended third party.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:25cea20e2ae09312237993c254bebc58983e3907469758392d7e97e9859b59c8_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:26fc99e8a9aa85fee4c07b4d77b4c699a41af995888f017ca1ab650d9777f20a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf7b68e5a7e3b4ecbab43eba4196a71b7f859fb6f9a4e11fe9dfd2ad530f684a_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:f08bc5caad4465d35f3526bdb1a43c4f56a2a70e6e0f584a291ca8984444bc5f_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:28ff05488ce8333b7b2cf2a68f465d0ba085064ba474ccee2652c7e8d4c8f5ab_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:2c2d500314bd8380c4dc06068ac379eadbc8c376bfa232cbf3c7bf1816a0d628_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6cc59e499071fb3a97ecfcdab32b29ed94b3e725d4c0c47f67b096205296e7e3_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:790215d0593d974c79ae90cd01d71b8a0f7d872c1b0ad78870d9f2ae28eaff5c_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "RHBZ#2487948",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487948"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44487",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44487"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v",
"url": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v"
}
],
"release_date": "2026-06-11T15:38:25.150000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T17:10:36+00:00",
"details": "See Kiali 2.17.10 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.2/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:25cea20e2ae09312237993c254bebc58983e3907469758392d7e97e9859b59c8_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:26fc99e8a9aa85fee4c07b4d77b4c699a41af995888f017ca1ab650d9777f20a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf7b68e5a7e3b4ecbab43eba4196a71b7f859fb6f9a4e11fe9dfd2ad530f684a_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:f08bc5caad4465d35f3526bdb1a43c4f56a2a70e6e0f584a291ca8984444bc5f_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:28ff05488ce8333b7b2cf2a68f465d0ba085064ba474ccee2652c7e8d4c8f5ab_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:2c2d500314bd8380c4dc06068ac379eadbc8c376bfa232cbf3c7bf1816a0d628_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6cc59e499071fb3a97ecfcdab32b29ed94b3e725d4c0c47f67b096205296e7e3_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:790215d0593d974c79ae90cd01d71b8a0f7d872c1b0ad78870d9f2ae28eaff5c_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33173"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:25cea20e2ae09312237993c254bebc58983e3907469758392d7e97e9859b59c8_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:26fc99e8a9aa85fee4c07b4d77b4c699a41af995888f017ca1ab650d9777f20a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf7b68e5a7e3b4ecbab43eba4196a71b7f859fb6f9a4e11fe9dfd2ad530f684a_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:f08bc5caad4465d35f3526bdb1a43c4f56a2a70e6e0f584a291ca8984444bc5f_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:28ff05488ce8333b7b2cf2a68f465d0ba085064ba474ccee2652c7e8d4c8f5ab_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:2c2d500314bd8380c4dc06068ac379eadbc8c376bfa232cbf3c7bf1816a0d628_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6cc59e499071fb3a97ecfcdab32b29ed94b3e725d4c0c47f67b096205296e7e3_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:790215d0593d974c79ae90cd01d71b8a0f7d872c1b0ad78870d9f2ae28eaff5c_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:25cea20e2ae09312237993c254bebc58983e3907469758392d7e97e9859b59c8_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:26fc99e8a9aa85fee4c07b4d77b4c699a41af995888f017ca1ab650d9777f20a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf7b68e5a7e3b4ecbab43eba4196a71b7f859fb6f9a4e11fe9dfd2ad530f684a_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:f08bc5caad4465d35f3526bdb1a43c4f56a2a70e6e0f584a291ca8984444bc5f_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:28ff05488ce8333b7b2cf2a68f465d0ba085064ba474ccee2652c7e8d4c8f5ab_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:2c2d500314bd8380c4dc06068ac379eadbc8c376bfa232cbf3c7bf1816a0d628_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6cc59e499071fb3a97ecfcdab32b29ed94b3e725d4c0c47f67b096205296e7e3_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:790215d0593d974c79ae90cd01d71b8a0f7d872c1b0ad78870d9f2ae28eaff5c_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via redirect flows"
},
{
"cve": "CVE-2026-44488",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-11T17:01:36.836488+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487949"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Denial of Service due to unenforced request and response size limits",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A denial of service flaw was found in Axios, a JavaScript HTTP client library. This issue arises when applications utilize the `fetch` adapter, as configured request and response size limits are not properly enforced. A remote attacker could exploit this by sending or receiving excessively large data bodies, leading to resource exhaustion and potential denial of service in affected server-side applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:25cea20e2ae09312237993c254bebc58983e3907469758392d7e97e9859b59c8_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:26fc99e8a9aa85fee4c07b4d77b4c699a41af995888f017ca1ab650d9777f20a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf7b68e5a7e3b4ecbab43eba4196a71b7f859fb6f9a4e11fe9dfd2ad530f684a_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:f08bc5caad4465d35f3526bdb1a43c4f56a2a70e6e0f584a291ca8984444bc5f_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:28ff05488ce8333b7b2cf2a68f465d0ba085064ba474ccee2652c7e8d4c8f5ab_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:2c2d500314bd8380c4dc06068ac379eadbc8c376bfa232cbf3c7bf1816a0d628_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6cc59e499071fb3a97ecfcdab32b29ed94b3e725d4c0c47f67b096205296e7e3_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:790215d0593d974c79ae90cd01d71b8a0f7d872c1b0ad78870d9f2ae28eaff5c_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "RHBZ#2487949",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487949"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf"
}
],
"release_date": "2026-06-11T15:37:38.013000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T17:10:36+00:00",
"details": "See Kiali 2.17.10 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.2/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:25cea20e2ae09312237993c254bebc58983e3907469758392d7e97e9859b59c8_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:26fc99e8a9aa85fee4c07b4d77b4c699a41af995888f017ca1ab650d9777f20a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf7b68e5a7e3b4ecbab43eba4196a71b7f859fb6f9a4e11fe9dfd2ad530f684a_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:f08bc5caad4465d35f3526bdb1a43c4f56a2a70e6e0f584a291ca8984444bc5f_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:28ff05488ce8333b7b2cf2a68f465d0ba085064ba474ccee2652c7e8d4c8f5ab_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:2c2d500314bd8380c4dc06068ac379eadbc8c376bfa232cbf3c7bf1816a0d628_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6cc59e499071fb3a97ecfcdab32b29ed94b3e725d4c0c47f67b096205296e7e3_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:790215d0593d974c79ae90cd01d71b8a0f7d872c1b0ad78870d9f2ae28eaff5c_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33173"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:25cea20e2ae09312237993c254bebc58983e3907469758392d7e97e9859b59c8_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:26fc99e8a9aa85fee4c07b4d77b4c699a41af995888f017ca1ab650d9777f20a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf7b68e5a7e3b4ecbab43eba4196a71b7f859fb6f9a4e11fe9dfd2ad530f684a_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:f08bc5caad4465d35f3526bdb1a43c4f56a2a70e6e0f584a291ca8984444bc5f_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:28ff05488ce8333b7b2cf2a68f465d0ba085064ba474ccee2652c7e8d4c8f5ab_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:2c2d500314bd8380c4dc06068ac379eadbc8c376bfa232cbf3c7bf1816a0d628_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6cc59e499071fb3a97ecfcdab32b29ed94b3e725d4c0c47f67b096205296e7e3_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:790215d0593d974c79ae90cd01d71b8a0f7d872c1b0ad78870d9f2ae28eaff5c_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:25cea20e2ae09312237993c254bebc58983e3907469758392d7e97e9859b59c8_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:26fc99e8a9aa85fee4c07b4d77b4c699a41af995888f017ca1ab650d9777f20a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf7b68e5a7e3b4ecbab43eba4196a71b7f859fb6f9a4e11fe9dfd2ad530f684a_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:f08bc5caad4465d35f3526bdb1a43c4f56a2a70e6e0f584a291ca8984444bc5f_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:28ff05488ce8333b7b2cf2a68f465d0ba085064ba474ccee2652c7e8d4c8f5ab_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:2c2d500314bd8380c4dc06068ac379eadbc8c376bfa232cbf3c7bf1816a0d628_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6cc59e499071fb3a97ecfcdab32b29ed94b3e725d4c0c47f67b096205296e7e3_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:790215d0593d974c79ae90cd01d71b8a0f7d872c1b0ad78870d9f2ae28eaff5c_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Denial of Service due to unenforced request and response size limits"
},
{
"cve": "CVE-2026-44492",
"cwe": {
"id": "CWE-289",
"name": "Authentication Bypass by Alternate Name"
},
"discovery_date": "2026-06-11T17:00:56.761751+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487938"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Axios, a JavaScript HTTP client library, that allows for a proxy bypass. When a `NO_PROXY` environment variable is configured to prevent direct connections to specific IPv4 addresses, an attacker can craft a request URL using the IPv4-mapped IPv6 address format. This bypasses the intended `NO_PROXY` exclusion, routing the request through the configured proxy and potentially exposing internal services or sensitive information, such as cloud instance metadata credentials.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:25cea20e2ae09312237993c254bebc58983e3907469758392d7e97e9859b59c8_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:26fc99e8a9aa85fee4c07b4d77b4c699a41af995888f017ca1ab650d9777f20a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf7b68e5a7e3b4ecbab43eba4196a71b7f859fb6f9a4e11fe9dfd2ad530f684a_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:f08bc5caad4465d35f3526bdb1a43c4f56a2a70e6e0f584a291ca8984444bc5f_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:28ff05488ce8333b7b2cf2a68f465d0ba085064ba474ccee2652c7e8d4c8f5ab_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:2c2d500314bd8380c4dc06068ac379eadbc8c376bfa232cbf3c7bf1816a0d628_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6cc59e499071fb3a97ecfcdab32b29ed94b3e725d4c0c47f67b096205296e7e3_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:790215d0593d974c79ae90cd01d71b8a0f7d872c1b0ad78870d9f2ae28eaff5c_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "RHBZ#2487938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487938"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44492"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv",
"url": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv"
}
],
"release_date": "2026-06-11T15:29:13.890000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T17:10:36+00:00",
"details": "See Kiali 2.17.10 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.2/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:25cea20e2ae09312237993c254bebc58983e3907469758392d7e97e9859b59c8_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:26fc99e8a9aa85fee4c07b4d77b4c699a41af995888f017ca1ab650d9777f20a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf7b68e5a7e3b4ecbab43eba4196a71b7f859fb6f9a4e11fe9dfd2ad530f684a_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:f08bc5caad4465d35f3526bdb1a43c4f56a2a70e6e0f584a291ca8984444bc5f_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:28ff05488ce8333b7b2cf2a68f465d0ba085064ba474ccee2652c7e8d4c8f5ab_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:2c2d500314bd8380c4dc06068ac379eadbc8c376bfa232cbf3c7bf1816a0d628_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6cc59e499071fb3a97ecfcdab32b29ed94b3e725d4c0c47f67b096205296e7e3_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:790215d0593d974c79ae90cd01d71b8a0f7d872c1b0ad78870d9f2ae28eaff5c_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33173"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:25cea20e2ae09312237993c254bebc58983e3907469758392d7e97e9859b59c8_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:26fc99e8a9aa85fee4c07b4d77b4c699a41af995888f017ca1ab650d9777f20a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf7b68e5a7e3b4ecbab43eba4196a71b7f859fb6f9a4e11fe9dfd2ad530f684a_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:f08bc5caad4465d35f3526bdb1a43c4f56a2a70e6e0f584a291ca8984444bc5f_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:28ff05488ce8333b7b2cf2a68f465d0ba085064ba474ccee2652c7e8d4c8f5ab_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:2c2d500314bd8380c4dc06068ac379eadbc8c376bfa232cbf3c7bf1816a0d628_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6cc59e499071fb3a97ecfcdab32b29ed94b3e725d4c0c47f67b096205296e7e3_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:790215d0593d974c79ae90cd01d71b8a0f7d872c1b0ad78870d9f2ae28eaff5c_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:25cea20e2ae09312237993c254bebc58983e3907469758392d7e97e9859b59c8_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:26fc99e8a9aa85fee4c07b4d77b4c699a41af995888f017ca1ab650d9777f20a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf7b68e5a7e3b4ecbab43eba4196a71b7f859fb6f9a4e11fe9dfd2ad530f684a_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:f08bc5caad4465d35f3526bdb1a43c4f56a2a70e6e0f584a291ca8984444bc5f_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:28ff05488ce8333b7b2cf2a68f465d0ba085064ba474ccee2652c7e8d4c8f5ab_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:2c2d500314bd8380c4dc06068ac379eadbc8c376bfa232cbf3c7bf1816a0d628_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6cc59e499071fb3a97ecfcdab32b29ed94b3e725d4c0c47f67b096205296e7e3_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:790215d0593d974c79ae90cd01d71b8a0f7d872c1b0ad78870d9f2ae28eaff5c_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization"
},
{
"cve": "CVE-2026-44494",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:01:12.945664+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487942"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. This vulnerability, a Prototype Pollution \"Gadget\" attack, allows an attacker to escalate any existing Object.prototype pollution in an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the Axios library allows an attacker to escalate existing prototype pollution vulnerabilities within an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. By injecting a malicious proxy configuration into the `Object.prototype`, an attacker can intercept, read, and modify all HTTP traffic, including sensitive authentication credentials, without direct user interaction. This poses a significant risk to data confidentiality and integrity in Red Hat products that utilize the Axios library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:25cea20e2ae09312237993c254bebc58983e3907469758392d7e97e9859b59c8_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:26fc99e8a9aa85fee4c07b4d77b4c699a41af995888f017ca1ab650d9777f20a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf7b68e5a7e3b4ecbab43eba4196a71b7f859fb6f9a4e11fe9dfd2ad530f684a_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:f08bc5caad4465d35f3526bdb1a43c4f56a2a70e6e0f584a291ca8984444bc5f_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:28ff05488ce8333b7b2cf2a68f465d0ba085064ba474ccee2652c7e8d4c8f5ab_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:2c2d500314bd8380c4dc06068ac379eadbc8c376bfa232cbf3c7bf1816a0d628_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6cc59e499071fb3a97ecfcdab32b29ed94b3e725d4c0c47f67b096205296e7e3_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:790215d0593d974c79ae90cd01d71b8a0f7d872c1b0ad78870d9f2ae28eaff5c_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "RHBZ#2487942",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487942"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44494",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44494"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh",
"url": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh"
}
],
"release_date": "2026-06-11T15:32:03.155000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T17:10:36+00:00",
"details": "See Kiali 2.17.10 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.2/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:25cea20e2ae09312237993c254bebc58983e3907469758392d7e97e9859b59c8_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:26fc99e8a9aa85fee4c07b4d77b4c699a41af995888f017ca1ab650d9777f20a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf7b68e5a7e3b4ecbab43eba4196a71b7f859fb6f9a4e11fe9dfd2ad530f684a_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:f08bc5caad4465d35f3526bdb1a43c4f56a2a70e6e0f584a291ca8984444bc5f_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:28ff05488ce8333b7b2cf2a68f465d0ba085064ba474ccee2652c7e8d4c8f5ab_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:2c2d500314bd8380c4dc06068ac379eadbc8c376bfa232cbf3c7bf1816a0d628_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6cc59e499071fb3a97ecfcdab32b29ed94b3e725d4c0c47f67b096205296e7e3_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:790215d0593d974c79ae90cd01d71b8a0f7d872c1b0ad78870d9f2ae28eaff5c_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33173"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:25cea20e2ae09312237993c254bebc58983e3907469758392d7e97e9859b59c8_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:26fc99e8a9aa85fee4c07b4d77b4c699a41af995888f017ca1ab650d9777f20a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf7b68e5a7e3b4ecbab43eba4196a71b7f859fb6f9a4e11fe9dfd2ad530f684a_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:f08bc5caad4465d35f3526bdb1a43c4f56a2a70e6e0f584a291ca8984444bc5f_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:28ff05488ce8333b7b2cf2a68f465d0ba085064ba474ccee2652c7e8d4c8f5ab_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:2c2d500314bd8380c4dc06068ac379eadbc8c376bfa232cbf3c7bf1816a0d628_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6cc59e499071fb3a97ecfcdab32b29ed94b3e725d4c0c47f67b096205296e7e3_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:790215d0593d974c79ae90cd01d71b8a0f7d872c1b0ad78870d9f2ae28eaff5c_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:25cea20e2ae09312237993c254bebc58983e3907469758392d7e97e9859b59c8_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:26fc99e8a9aa85fee4c07b4d77b4c699a41af995888f017ca1ab650d9777f20a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf7b68e5a7e3b4ecbab43eba4196a71b7f859fb6f9a4e11fe9dfd2ad530f684a_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:f08bc5caad4465d35f3526bdb1a43c4f56a2a70e6e0f584a291ca8984444bc5f_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:28ff05488ce8333b7b2cf2a68f465d0ba085064ba474ccee2652c7e8d4c8f5ab_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:2c2d500314bd8380c4dc06068ac379eadbc8c376bfa232cbf3c7bf1816a0d628_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6cc59e499071fb3a97ecfcdab32b29ed94b3e725d4c0c47f67b096205296e7e3_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:790215d0593d974c79ae90cd01d71b8a0f7d872c1b0ad78870d9f2ae28eaff5c_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution"
},
{
"cve": "CVE-2026-44495",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:00:53.999811+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487937"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure due to prototype pollution vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Axios, a promise-based HTTP client, can lead to information disclosure, including credential theft and response hijacking, or denial of service. Exploitation requires a separate prototype pollution vulnerability in the same JavaScript process, allowing an attacker to control `Object.prototype.transformResponse`. Red Hat products using affected Axios versions are at risk if another component introduces such pollution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:25cea20e2ae09312237993c254bebc58983e3907469758392d7e97e9859b59c8_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:26fc99e8a9aa85fee4c07b4d77b4c699a41af995888f017ca1ab650d9777f20a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf7b68e5a7e3b4ecbab43eba4196a71b7f859fb6f9a4e11fe9dfd2ad530f684a_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:f08bc5caad4465d35f3526bdb1a43c4f56a2a70e6e0f584a291ca8984444bc5f_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:28ff05488ce8333b7b2cf2a68f465d0ba085064ba474ccee2652c7e8d4c8f5ab_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:2c2d500314bd8380c4dc06068ac379eadbc8c376bfa232cbf3c7bf1816a0d628_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6cc59e499071fb3a97ecfcdab32b29ed94b3e725d4c0c47f67b096205296e7e3_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:790215d0593d974c79ae90cd01d71b8a0f7d872c1b0ad78870d9f2ae28eaff5c_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "RHBZ#2487937",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487937"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44495",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw"
}
],
"release_date": "2026-06-11T15:33:12.433000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T17:10:36+00:00",
"details": "See Kiali 2.17.10 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.2/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:25cea20e2ae09312237993c254bebc58983e3907469758392d7e97e9859b59c8_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:26fc99e8a9aa85fee4c07b4d77b4c699a41af995888f017ca1ab650d9777f20a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf7b68e5a7e3b4ecbab43eba4196a71b7f859fb6f9a4e11fe9dfd2ad530f684a_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:f08bc5caad4465d35f3526bdb1a43c4f56a2a70e6e0f584a291ca8984444bc5f_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:28ff05488ce8333b7b2cf2a68f465d0ba085064ba474ccee2652c7e8d4c8f5ab_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:2c2d500314bd8380c4dc06068ac379eadbc8c376bfa232cbf3c7bf1816a0d628_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6cc59e499071fb3a97ecfcdab32b29ed94b3e725d4c0c47f67b096205296e7e3_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:790215d0593d974c79ae90cd01d71b8a0f7d872c1b0ad78870d9f2ae28eaff5c_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33173"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:25cea20e2ae09312237993c254bebc58983e3907469758392d7e97e9859b59c8_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:26fc99e8a9aa85fee4c07b4d77b4c699a41af995888f017ca1ab650d9777f20a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf7b68e5a7e3b4ecbab43eba4196a71b7f859fb6f9a4e11fe9dfd2ad530f684a_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:f08bc5caad4465d35f3526bdb1a43c4f56a2a70e6e0f584a291ca8984444bc5f_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:28ff05488ce8333b7b2cf2a68f465d0ba085064ba474ccee2652c7e8d4c8f5ab_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:2c2d500314bd8380c4dc06068ac379eadbc8c376bfa232cbf3c7bf1816a0d628_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6cc59e499071fb3a97ecfcdab32b29ed94b3e725d4c0c47f67b096205296e7e3_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:790215d0593d974c79ae90cd01d71b8a0f7d872c1b0ad78870d9f2ae28eaff5c_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:25cea20e2ae09312237993c254bebc58983e3907469758392d7e97e9859b59c8_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:26fc99e8a9aa85fee4c07b4d77b4c699a41af995888f017ca1ab650d9777f20a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf7b68e5a7e3b4ecbab43eba4196a71b7f859fb6f9a4e11fe9dfd2ad530f684a_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:f08bc5caad4465d35f3526bdb1a43c4f56a2a70e6e0f584a291ca8984444bc5f_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:28ff05488ce8333b7b2cf2a68f465d0ba085064ba474ccee2652c7e8d4c8f5ab_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:2c2d500314bd8380c4dc06068ac379eadbc8c376bfa232cbf3c7bf1816a0d628_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6cc59e499071fb3a97ecfcdab32b29ed94b3e725d4c0c47f67b096205296e7e3_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:790215d0593d974c79ae90cd01d71b8a0f7d872c1b0ad78870d9f2ae28eaff5c_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure due to prototype pollution vulnerability"
},
{
"cve": "CVE-2026-44496",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-06-11T17:01:15.856386+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487943"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in Axios can lead to a client-side Denial of Service. An attacker capable of influencing the XSRF cookie name within a browser environment could trigger excessive regular expression processing, causing the affected browser tab to freeze and degrade user availability. This issue specifically impacts browser-based applications and does not affect Node.js HTTP adapter usage, React Native, or web workers.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:25cea20e2ae09312237993c254bebc58983e3907469758392d7e97e9859b59c8_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:26fc99e8a9aa85fee4c07b4d77b4c699a41af995888f017ca1ab650d9777f20a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf7b68e5a7e3b4ecbab43eba4196a71b7f859fb6f9a4e11fe9dfd2ad530f684a_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:f08bc5caad4465d35f3526bdb1a43c4f56a2a70e6e0f584a291ca8984444bc5f_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:28ff05488ce8333b7b2cf2a68f465d0ba085064ba474ccee2652c7e8d4c8f5ab_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:2c2d500314bd8380c4dc06068ac379eadbc8c376bfa232cbf3c7bf1816a0d628_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6cc59e499071fb3a97ecfcdab32b29ed94b3e725d4c0c47f67b096205296e7e3_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:790215d0593d974c79ae90cd01d71b8a0f7d872c1b0ad78870d9f2ae28eaff5c_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "RHBZ#2487943",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487943"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44496",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44496"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf"
}
],
"release_date": "2026-06-11T15:34:28.492000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T17:10:36+00:00",
"details": "See Kiali 2.17.10 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.2/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:25cea20e2ae09312237993c254bebc58983e3907469758392d7e97e9859b59c8_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:26fc99e8a9aa85fee4c07b4d77b4c699a41af995888f017ca1ab650d9777f20a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf7b68e5a7e3b4ecbab43eba4196a71b7f859fb6f9a4e11fe9dfd2ad530f684a_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:f08bc5caad4465d35f3526bdb1a43c4f56a2a70e6e0f584a291ca8984444bc5f_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:28ff05488ce8333b7b2cf2a68f465d0ba085064ba474ccee2652c7e8d4c8f5ab_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:2c2d500314bd8380c4dc06068ac379eadbc8c376bfa232cbf3c7bf1816a0d628_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6cc59e499071fb3a97ecfcdab32b29ed94b3e725d4c0c47f67b096205296e7e3_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:790215d0593d974c79ae90cd01d71b8a0f7d872c1b0ad78870d9f2ae28eaff5c_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33173"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:25cea20e2ae09312237993c254bebc58983e3907469758392d7e97e9859b59c8_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:26fc99e8a9aa85fee4c07b4d77b4c699a41af995888f017ca1ab650d9777f20a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf7b68e5a7e3b4ecbab43eba4196a71b7f859fb6f9a4e11fe9dfd2ad530f684a_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:f08bc5caad4465d35f3526bdb1a43c4f56a2a70e6e0f584a291ca8984444bc5f_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:28ff05488ce8333b7b2cf2a68f465d0ba085064ba474ccee2652c7e8d4c8f5ab_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:2c2d500314bd8380c4dc06068ac379eadbc8c376bfa232cbf3c7bf1816a0d628_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6cc59e499071fb3a97ecfcdab32b29ed94b3e725d4c0c47f67b096205296e7e3_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:790215d0593d974c79ae90cd01d71b8a0f7d872c1b0ad78870d9f2ae28eaff5c_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:25cea20e2ae09312237993c254bebc58983e3907469758392d7e97e9859b59c8_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:26fc99e8a9aa85fee4c07b4d77b4c699a41af995888f017ca1ab650d9777f20a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf7b68e5a7e3b4ecbab43eba4196a71b7f859fb6f9a4e11fe9dfd2ad530f684a_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:f08bc5caad4465d35f3526bdb1a43c4f56a2a70e6e0f584a291ca8984444bc5f_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:28ff05488ce8333b7b2cf2a68f465d0ba085064ba474ccee2652c7e8d4c8f5ab_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:2c2d500314bd8380c4dc06068ac379eadbc8c376bfa232cbf3c7bf1816a0d628_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6cc59e499071fb3a97ecfcdab32b29ed94b3e725d4c0c47f67b096205296e7e3_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:790215d0593d974c79ae90cd01d71b8a0f7d872c1b0ad78870d9f2ae28eaff5c_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name"
},
{
"cve": "CVE-2026-48779",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-16T22:01:24.571224+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2489661"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that consume excessive memory. Consequently, this leads to process termination and a denial of service (DoS) for the remote peer.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `ws` WebSocket library. A remote attacker can exploit this flaw by sending a high volume of small, fragmented data, leading to excessive memory consumption and subsequent process termination. This can result in service disruption for Red Hat products that utilize `ws` for WebSocket communication.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:25cea20e2ae09312237993c254bebc58983e3907469758392d7e97e9859b59c8_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:26fc99e8a9aa85fee4c07b4d77b4c699a41af995888f017ca1ab650d9777f20a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf7b68e5a7e3b4ecbab43eba4196a71b7f859fb6f9a4e11fe9dfd2ad530f684a_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:f08bc5caad4465d35f3526bdb1a43c4f56a2a70e6e0f584a291ca8984444bc5f_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:28ff05488ce8333b7b2cf2a68f465d0ba085064ba474ccee2652c7e8d4c8f5ab_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:2c2d500314bd8380c4dc06068ac379eadbc8c376bfa232cbf3c7bf1816a0d628_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6cc59e499071fb3a97ecfcdab32b29ed94b3e725d4c0c47f67b096205296e7e3_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:790215d0593d974c79ae90cd01d71b8a0f7d872c1b0ad78870d9f2ae28eaff5c_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48779"
},
{
"category": "external",
"summary": "RHBZ#2489661",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489661"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48779",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48779"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48779",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48779"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7",
"url": "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53",
"url": "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94",
"url": "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8",
"url": "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p",
"url": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p"
}
],
"release_date": "2026-06-16T21:26:22.537000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T17:10:36+00:00",
"details": "See Kiali 2.17.10 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.2/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:25cea20e2ae09312237993c254bebc58983e3907469758392d7e97e9859b59c8_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:26fc99e8a9aa85fee4c07b4d77b4c699a41af995888f017ca1ab650d9777f20a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf7b68e5a7e3b4ecbab43eba4196a71b7f859fb6f9a4e11fe9dfd2ad530f684a_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:f08bc5caad4465d35f3526bdb1a43c4f56a2a70e6e0f584a291ca8984444bc5f_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:28ff05488ce8333b7b2cf2a68f465d0ba085064ba474ccee2652c7e8d4c8f5ab_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:2c2d500314bd8380c4dc06068ac379eadbc8c376bfa232cbf3c7bf1816a0d628_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6cc59e499071fb3a97ecfcdab32b29ed94b3e725d4c0c47f67b096205296e7e3_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:790215d0593d974c79ae90cd01d71b8a0f7d872c1b0ad78870d9f2ae28eaff5c_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33173"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:25cea20e2ae09312237993c254bebc58983e3907469758392d7e97e9859b59c8_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:26fc99e8a9aa85fee4c07b4d77b4c699a41af995888f017ca1ab650d9777f20a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf7b68e5a7e3b4ecbab43eba4196a71b7f859fb6f9a4e11fe9dfd2ad530f684a_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:f08bc5caad4465d35f3526bdb1a43c4f56a2a70e6e0f584a291ca8984444bc5f_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:28ff05488ce8333b7b2cf2a68f465d0ba085064ba474ccee2652c7e8d4c8f5ab_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:2c2d500314bd8380c4dc06068ac379eadbc8c376bfa232cbf3c7bf1816a0d628_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6cc59e499071fb3a97ecfcdab32b29ed94b3e725d4c0c47f67b096205296e7e3_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:790215d0593d974c79ae90cd01d71b8a0f7d872c1b0ad78870d9f2ae28eaff5c_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:25cea20e2ae09312237993c254bebc58983e3907469758392d7e97e9859b59c8_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:26fc99e8a9aa85fee4c07b4d77b4c699a41af995888f017ca1ab650d9777f20a_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:cf7b68e5a7e3b4ecbab43eba4196a71b7f859fb6f9a4e11fe9dfd2ad530f684a_arm64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:f08bc5caad4465d35f3526bdb1a43c4f56a2a70e6e0f584a291ca8984444bc5f_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:28ff05488ce8333b7b2cf2a68f465d0ba085064ba474ccee2652c7e8d4c8f5ab_s390x",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:2c2d500314bd8380c4dc06068ac379eadbc8c376bfa232cbf3c7bf1816a0d628_ppc64le",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6cc59e499071fb3a97ecfcdab32b29ed94b3e725d4c0c47f67b096205296e7e3_amd64",
"Red Hat OpenShift Service Mesh 3.2:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:790215d0593d974c79ae90cd01d71b8a0f7d872c1b0ad78870d9f2ae28eaff5c_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments"
}
]
}
RHSA-2026:33183
Vulnerability from csaf_redhat - Published: 2026-06-29 17:47 - Updated: 2026-08-10 09:44Summary
Red Hat Security Advisory: Kiali 2.22.6 for Red Hat OpenShift Service Mesh 3.3
Severity
Important
Notes
Topic: Kiali 2.22.6 for Red Hat OpenShift Service Mesh 3.3 is now available.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Kiali 2.22.6, for Red Hat OpenShift Service Mesh 3.3, provides observability for the service mesh by offering a visual representation of the mesh topology and metrics, helping users monitor, trace, and manage efficiently.
Security Fix(es):
* CVE-2026-42338 openshift-service-mesh/kiali-ossmc-rhel9: ip-address: Cross-site scripting via improper HTML escaping of untrusted input (OSSM-14065)
* CVE-2026-42338 openshift-service-mesh/kiali-rhel9: ip-address: Cross-site scripting via improper HTML escaping of untrusted input (OSSM-14060)
* CVE-2026-39821 openshift-service-mesh/kiali-rhel9: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (OSSM-14071)
* CVE-2026-44495 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Information disclosure due to prototype pollution vulnerability (OSSM-14148)
* CVE-2026-44495 openshift-service-mesh/kiali-rhel9: Axios: Information disclosure due to prototype pollution vulnerability (OSSM-14147)
* CVE-2026-44488 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Denial of Service due to unenforced request and response size limits (OSSM-14163)
* CVE-2026-44488 openshift-service-mesh/kiali-rhel9: Axios: Denial of Service due to unenforced request and response size limits (OSSM-14161)
* CVE-2026-44487 openshift-service-mesh/kiali-rhel9: Axios: Information disclosure of proxy credentials via redirect flows (OSSM-14180)
* CVE-2026-44487 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Information disclosure of proxy credentials via redirect flows (OSSM-14179)
* CVE-2026-44494 openshift-service-mesh/kiali-rhel9: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution (OSSM-14196)
* CVE-2026-44494 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution (OSSM-14198)
* CVE-2026-44496 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name (OSSM-14205)
* CVE-2026-44496 openshift-service-mesh/kiali-rhel9: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name (OSSM-14217)
* CVE-2026-44486 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Information disclosure of proxy credentials via HTTP redirects (OSSM-14189)
* CVE-2026-44486 openshift-service-mesh/kiali-rhel9: Axios: Information disclosure of proxy credentials via HTTP redirects (OSSM-14221)
* CVE-2026-44492 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization (OSSM-14228)
* CVE-2026-44492 openshift-service-mesh/kiali-rhel9: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization (OSSM-14233)
* CVE-2026-48779 openshift-service-mesh/kiali-rhel9: ws: Denial of Service via memory exhaustion from small WebSocket fragments (OSSM-14315)
* CVE-2026-48779 openshift-service-mesh/kiali-ossmc-rhel9: ws: Denial of Service via memory exhaustion from small WebSocket fragments (OSSM-14313)
* CVE-2026-12143 openshift-service-mesh/kiali-ossmc-rhel9: form-data: Form field override via CRLF injection (OSSM-14340)
* CVE-2026-12143 openshift-service-mesh/kiali-rhel9: form-data: Form field override via CRLF injection (OSSM-14331)
* CVE-2026-46625 openshift-service-mesh/kiali-ossmc-rhel9: JavaScript Cookie: Cookie attribute manipulation via prototype pollution (OSSM-14344)
* CVE-2026-46625 openshift-service-mesh/kiali-rhel9: JavaScript Cookie: Cookie attribute manipulation via prototype pollution (OSSM-14345)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in ip-address, a JavaScript library for parsing and manipulating IPv4 and IPv6 addresses. This vulnerability allows a remote attacker to perform cross-site scripting (XSS) by providing untrusted input to the Address6 constructor. When an application renders the output of Address6.group(), Address6.link(), or the AddressError.parseMessage as HTML without proper escaping, the attacker-controlled content can be executed in the user's browser.
8.1 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.
8.6 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. This vulnerability, a Prototype Pollution "Gadget" attack, allows an attacker to escalate any existing Object.prototype pollution in an application's dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.
8.7 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.
7.0 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in JavaScript Cookie (js-cookie). This vulnerability allows a remote attacker to manipulate cookie attributes by exploiting a prototype pollution issue within the `assign()` helper function. When processing specially crafted JSON input, the flaw enables an attacker to hijack the prototype of a cookie's attribute object. This allows the attacker to set sensitive cookie attributes such as `domain`, `secure`, `samesite`, `expires`, and `path`, potentially leading to security bypasses or session manipulation.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le | — |
Vendor Fix
fix
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x | — |
Threats
Impact
Important
A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that consume excessive memory. Consequently, this leads to process termination and a denial of service (DoS) for the remote peer.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x | — |
Workaround
|
Threats
Impact
Important
References
91 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Kiali 2.22.6 for Red Hat OpenShift Service Mesh 3.3 is now available.\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Kiali 2.22.6, for Red Hat OpenShift Service Mesh 3.3, provides observability for the service mesh by offering a visual representation of the mesh topology and metrics, helping users monitor, trace, and manage efficiently.\n\nSecurity Fix(es):\n\n* CVE-2026-42338 openshift-service-mesh/kiali-ossmc-rhel9: ip-address: Cross-site scripting via improper HTML escaping of untrusted input (OSSM-14065)\n* CVE-2026-42338 openshift-service-mesh/kiali-rhel9: ip-address: Cross-site scripting via improper HTML escaping of untrusted input (OSSM-14060)\n* CVE-2026-39821 openshift-service-mesh/kiali-rhel9: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (OSSM-14071)\n* CVE-2026-44495 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Information disclosure due to prototype pollution vulnerability (OSSM-14148)\n* CVE-2026-44495 openshift-service-mesh/kiali-rhel9: Axios: Information disclosure due to prototype pollution vulnerability (OSSM-14147)\n* CVE-2026-44488 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Denial of Service due to unenforced request and response size limits (OSSM-14163)\n* CVE-2026-44488 openshift-service-mesh/kiali-rhel9: Axios: Denial of Service due to unenforced request and response size limits (OSSM-14161)\n* CVE-2026-44487 openshift-service-mesh/kiali-rhel9: Axios: Information disclosure of proxy credentials via redirect flows (OSSM-14180)\n* CVE-2026-44487 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Information disclosure of proxy credentials via redirect flows (OSSM-14179)\n* CVE-2026-44494 openshift-service-mesh/kiali-rhel9: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution (OSSM-14196)\n* CVE-2026-44494 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution (OSSM-14198)\n* CVE-2026-44496 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name (OSSM-14205)\n* CVE-2026-44496 openshift-service-mesh/kiali-rhel9: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name (OSSM-14217)\n* CVE-2026-44486 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Information disclosure of proxy credentials via HTTP redirects (OSSM-14189)\n* CVE-2026-44486 openshift-service-mesh/kiali-rhel9: Axios: Information disclosure of proxy credentials via HTTP redirects (OSSM-14221)\n* CVE-2026-44492 openshift-service-mesh/kiali-ossmc-rhel9: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization (OSSM-14228)\n* CVE-2026-44492 openshift-service-mesh/kiali-rhel9: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization (OSSM-14233)\n* CVE-2026-48779 openshift-service-mesh/kiali-rhel9: ws: Denial of Service via memory exhaustion from small WebSocket fragments (OSSM-14315)\n* CVE-2026-48779 openshift-service-mesh/kiali-ossmc-rhel9: ws: Denial of Service via memory exhaustion from small WebSocket fragments (OSSM-14313)\n* CVE-2026-12143 openshift-service-mesh/kiali-ossmc-rhel9: form-data: Form field override via CRLF injection (OSSM-14340)\n* CVE-2026-12143 openshift-service-mesh/kiali-rhel9: form-data: Form field override via CRLF injection (OSSM-14331)\n* CVE-2026-46625 openshift-service-mesh/kiali-ossmc-rhel9: JavaScript Cookie: Cookie attribute manipulation via prototype pollution (OSSM-14344)\n* CVE-2026-46625 openshift-service-mesh/kiali-rhel9: JavaScript Cookie: Cookie attribute manipulation via prototype pollution (OSSM-14345)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:33183",
"url": "https://access.redhat.com/errata/RHSA-2026:33183"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-12143",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42338",
"url": "https://access.redhat.com/security/cve/CVE-2026-42338"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44486",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44487",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44488",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44492",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44494",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44495",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44496",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46625",
"url": "https://access.redhat.com/security/cve/CVE-2026-46625"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-48779",
"url": "https://access.redhat.com/security/cve/CVE-2026-48779"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification",
"url": "https://access.redhat.com/security/updates/classification"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_33183.json"
}
],
"title": "Red Hat Security Advisory: Kiali 2.22.6 for Red Hat OpenShift Service Mesh 3.3",
"tracking": {
"current_release_date": "2026-08-10T09:44:15+00:00",
"generator": {
"date": "2026-08-10T09:44:15+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.12"
}
},
"id": "RHSA-2026:33183",
"initial_release_date": "2026-06-29T17:47:08+00:00",
"revision_history": [
{
"date": "2026-06-29T17:47:08+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-08T04:36:23+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-10T09:44:15+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Service Mesh 3.3",
"product": {
"name": "Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:service_mesh:3.3::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Service Mesh"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9@sha256%3A6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-rhel9\u0026tag=1782201466"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-operator-bundle@sha256%3A69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-operator-bundle\u0026tag=1782295602"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9-operator@sha256%3Aa9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator\u0026tag=1782231576"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel9@sha256%3A2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9\u0026tag=1782231869"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9@sha256%3A4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-rhel9\u0026tag=1782201466"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9-operator@sha256%3A64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator\u0026tag=1782231576"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel9@sha256%3Aea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9\u0026tag=1782231869"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9@sha256%3Abea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-rhel9\u0026tag=1782201466"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9-operator@sha256%3A9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator\u0026tag=1782231576"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel9@sha256%3A50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9\u0026tag=1782231869"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9@sha256%3Ab2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-rhel9\u0026tag=1782201466"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x",
"product_identification_helper": {
"purl": "pkg:oci/kiali-rhel9-operator@sha256%3Ae68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator\u0026tag=1782231576"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"product_identification_helper": {
"purl": "pkg:oci/kiali-ossmc-rhel9@sha256%3A577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9\u0026tag=1782231869"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64 as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64 as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64 as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64 as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64 as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64 as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64 as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le as a component of Red Hat OpenShift Service Mesh 3.3",
"product_id": "Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.3"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-12143",
"cwe": {
"id": "CWE-93",
"name": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
},
"discovery_date": "2026-06-12T19:00:57.360953+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488480"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (\") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "form-data: form-data: Form field override via CRLF injection",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important impact flaw in the form-data library: a remote attacker can inject arbitrary headers or additional multipart parts via CRLF injection in field names or filenames, potentially overriding sensitive form fields and affecting data integrity.\n\nFor RHOAI and RHEL AI, severity is Moderate because affected versions appear only as a transitive npm dependency in RHOAI (dashboard, mod-arch plugins, MLflow UI) and RHEL AI 3.4 bootc images, and those products use fixed field names for uploads rather than passing untrusted user input as multipart field names or filenames. The documented exploit path is therefore not reachable in default deployments. Practical impact is limited to non-default or custom integrations that forward multipart requests using attacker-controlled field names.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "RHBZ#2488480",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488480"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12143",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12143"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://cwe.mitre.org/data/definitions/93.html",
"url": "https://cwe.mitre.org/data/definitions/93.html"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435",
"url": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229",
"url": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045",
"url": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx",
"url": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx"
},
{
"category": "external",
"summary": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data",
"url": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/form-data",
"url": "https://www.npmjs.com/package/form-data"
}
],
"release_date": "2026-06-12T18:01:30.362000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T17:47:08+00:00",
"details": "See Kiali 2.22.6 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.3/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33183"
},
{
"category": "workaround",
"details": "Applications using the `form-data` library should implement strict input validation and sanitization for all field names and filenames derived from untrusted sources. This prevents the injection of control characters (CR, LF, \") that could lead to header injection or form field overrides. Deployments that exclusively use fixed or trusted field names are not impacted.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "form-data: form-data: Form field override via CRLF injection"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T17:47:08+00:00",
"details": "See Kiali 2.22.6 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.3/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33183"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-42338",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-12T21:01:14.436876+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2476810"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ip-address, a JavaScript library for parsing and manipulating IPv4 and IPv6 addresses. This vulnerability allows a remote attacker to perform cross-site scripting (XSS) by providing untrusted input to the Address6 constructor. When an application renders the output of Address6.group(), Address6.link(), or the AddressError.parseMessage as HTML without proper escaping, the attacker-controlled content can be executed in the user\u0027s browser.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in the `ip-address` JavaScript library is rated as Important. It allows for cross-site scripting (XSS) when an application processes untrusted input through the `Address6` constructor and subsequently renders the unescaped output of methods like `Address6.group()`, `Address6.link()`, or `AddressError.parseMessage` directly as HTML. While the library itself is affected, exploitation is contingent on specific application-level rendering practices that may not be common in Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42338"
},
{
"category": "external",
"summary": "RHBZ#2476810",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2476810"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42338",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42338"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42338",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42338"
},
{
"category": "external",
"summary": "https://github.com/beaugunderson/ip-address/security/advisories/GHSA-v2v4-37r5-5v8g",
"url": "https://github.com/beaugunderson/ip-address/security/advisories/GHSA-v2v4-37r5-5v8g"
}
],
"release_date": "2026-05-12T19:43:16.470000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T17:47:08+00:00",
"details": "See Kiali 2.22.6 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.3/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33183"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input"
},
{
"cve": "CVE-2026-44486",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:30.944384+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487947"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in the Axios Node.js HTTP adapter. Red Hat products utilizing Axios in a Node.js environment with an authenticated proxy and automatic redirects enabled are susceptible. The vulnerability arises when a request, initially sent through an authenticated proxy, is redirected to a target that no longer uses the proxy, potentially leaking `Proxy-Authorization` headers containing sensitive credentials to an untrusted remote server. This risk is heightened in deployments where applications interact with untrusted HTTP origins.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "RHBZ#2487947",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487947"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44486",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44486"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc",
"url": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc"
}
],
"release_date": "2026-06-11T15:39:07.714000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T17:47:08+00:00",
"details": "See Kiali 2.22.6 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.3/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33183"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects"
},
{
"cve": "CVE-2026-44487",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:34.091476+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487948"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via redirect flows",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in Axios affecting Node.js environments. When an application uses Axios with an authenticated HTTP proxy and follows redirects from an HTTP to a non-proxied HTTPS destination, the Proxy-Authorization header may be inadvertently sent to the final origin server. This could lead to the exposure of sensitive proxy credentials to an unintended third party.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "RHBZ#2487948",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487948"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44487",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44487"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v",
"url": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v"
}
],
"release_date": "2026-06-11T15:38:25.150000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T17:47:08+00:00",
"details": "See Kiali 2.22.6 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.3/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33183"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via redirect flows"
},
{
"cve": "CVE-2026-44488",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-11T17:01:36.836488+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487949"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Denial of Service due to unenforced request and response size limits",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A denial of service flaw was found in Axios, a JavaScript HTTP client library. This issue arises when applications utilize the `fetch` adapter, as configured request and response size limits are not properly enforced. A remote attacker could exploit this by sending or receiving excessively large data bodies, leading to resource exhaustion and potential denial of service in affected server-side applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "RHBZ#2487949",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487949"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf"
}
],
"release_date": "2026-06-11T15:37:38.013000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T17:47:08+00:00",
"details": "See Kiali 2.22.6 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.3/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33183"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Denial of Service due to unenforced request and response size limits"
},
{
"cve": "CVE-2026-44492",
"cwe": {
"id": "CWE-289",
"name": "Authentication Bypass by Alternate Name"
},
"discovery_date": "2026-06-11T17:00:56.761751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487938"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Axios, a JavaScript HTTP client library, that allows for a proxy bypass. When a `NO_PROXY` environment variable is configured to prevent direct connections to specific IPv4 addresses, an attacker can craft a request URL using the IPv4-mapped IPv6 address format. This bypasses the intended `NO_PROXY` exclusion, routing the request through the configured proxy and potentially exposing internal services or sensitive information, such as cloud instance metadata credentials.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "RHBZ#2487938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487938"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44492"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv",
"url": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv"
}
],
"release_date": "2026-06-11T15:29:13.890000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T17:47:08+00:00",
"details": "See Kiali 2.22.6 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.3/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33183"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization"
},
{
"cve": "CVE-2026-44494",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:01:12.945664+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487942"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. This vulnerability, a Prototype Pollution \"Gadget\" attack, allows an attacker to escalate any existing Object.prototype pollution in an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the Axios library allows an attacker to escalate existing prototype pollution vulnerabilities within an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. By injecting a malicious proxy configuration into the `Object.prototype`, an attacker can intercept, read, and modify all HTTP traffic, including sensitive authentication credentials, without direct user interaction. This poses a significant risk to data confidentiality and integrity in Red Hat products that utilize the Axios library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "RHBZ#2487942",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487942"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44494",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44494"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh",
"url": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh"
}
],
"release_date": "2026-06-11T15:32:03.155000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T17:47:08+00:00",
"details": "See Kiali 2.22.6 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.3/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33183"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution"
},
{
"cve": "CVE-2026-44495",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:00:53.999811+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487937"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure due to prototype pollution vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Axios, a promise-based HTTP client, can lead to information disclosure, including credential theft and response hijacking, or denial of service. Exploitation requires a separate prototype pollution vulnerability in the same JavaScript process, allowing an attacker to control `Object.prototype.transformResponse`. Red Hat products using affected Axios versions are at risk if another component introduces such pollution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "RHBZ#2487937",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487937"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44495",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw"
}
],
"release_date": "2026-06-11T15:33:12.433000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T17:47:08+00:00",
"details": "See Kiali 2.22.6 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.3/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33183"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure due to prototype pollution vulnerability"
},
{
"cve": "CVE-2026-44496",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-06-11T17:01:15.856386+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487943"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in Axios can lead to a client-side Denial of Service. An attacker capable of influencing the XSRF cookie name within a browser environment could trigger excessive regular expression processing, causing the affected browser tab to freeze and degrade user availability. This issue specifically impacts browser-based applications and does not affect Node.js HTTP adapter usage, React Native, or web workers.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "RHBZ#2487943",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487943"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44496",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44496"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf"
}
],
"release_date": "2026-06-11T15:34:28.492000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T17:47:08+00:00",
"details": "See Kiali 2.22.6 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.3/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33183"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name"
},
{
"cve": "CVE-2026-46625",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-10T22:01:17.685570+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487740"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in JavaScript Cookie (js-cookie). This vulnerability allows a remote attacker to manipulate cookie attributes by exploiting a prototype pollution issue within the `assign()` helper function. When processing specially crafted JSON input, the flaw enables an attacker to hijack the prototype of a cookie\u0027s attribute object. This allows the attacker to set sensitive cookie attributes such as `domain`, `secure`, `samesite`, `expires`, and `path`, potentially leading to security bypasses or session manipulation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "js-cookie: JavaScript Cookie: Cookie attribute manipulation via prototype pollution",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46625"
},
{
"category": "external",
"summary": "RHBZ#2487740",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487740"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46625",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46625"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46625",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46625"
},
{
"category": "external",
"summary": "https://github.com/js-cookie/js-cookie/commit/eb3c40e89731e99b8970faaf35ddad249c6c0020",
"url": "https://github.com/js-cookie/js-cookie/commit/eb3c40e89731e99b8970faaf35ddad249c6c0020"
},
{
"category": "external",
"summary": "https://github.com/js-cookie/js-cookie/releases/tag/v3.0.7",
"url": "https://github.com/js-cookie/js-cookie/releases/tag/v3.0.7"
},
{
"category": "external",
"summary": "https://github.com/js-cookie/js-cookie/security/advisories/GHSA-qjx8-664m-686j",
"url": "https://github.com/js-cookie/js-cookie/security/advisories/GHSA-qjx8-664m-686j"
}
],
"release_date": "2026-06-10T21:18:05.372000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T17:47:08+00:00",
"details": "See Kiali 2.22.6 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.3/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33183"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "js-cookie: JavaScript Cookie: Cookie attribute manipulation via prototype pollution"
},
{
"cve": "CVE-2026-48779",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-16T22:01:24.571224+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2489661"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that consume excessive memory. Consequently, this leads to process termination and a denial of service (DoS) for the remote peer.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `ws` WebSocket library. A remote attacker can exploit this flaw by sending a high volume of small, fragmented data, leading to excessive memory consumption and subsequent process termination. This can result in service disruption for Red Hat products that utilize `ws` for WebSocket communication.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48779"
},
{
"category": "external",
"summary": "RHBZ#2489661",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489661"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48779",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48779"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48779",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48779"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7",
"url": "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53",
"url": "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94",
"url": "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8",
"url": "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p",
"url": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p"
}
],
"release_date": "2026-06-16T21:26:22.537000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-29T17:47:08+00:00",
"details": "See Kiali 2.22.6 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.3/html/observability/kiali-operator-provided-by-red-hat",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33183"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-operator-bundle@sha256:69ba86f602d01541695b2ab5e5a9db8ea6c6062af70de40d9b75b3d9b67a8abd_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:2031ccb4f6cc24c036fae7f291ecb59b05e6c0a49a0abfaea39eb444f7f7b6bc_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:50584bc28d045ff5db77e4973c70e59bae2f33a2cc87c400c17bd6eafd7466ba_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:577b284ce810c91c5f9a44f9be5aad96e77e0546f61b6dce376013c7ebf480be_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9@sha256:ea66e2eb93ef01b30b2f4758e043a5c4a889df27a26a63334549fca91a8abd4b_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:64851d8db25a79dbab207e3b14599c7486f8bdc8fe0b16e6e614164228c2b405_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:9a8266a9c08cc1df3374ec3d0431c52b10275923e19cb767ee7633f71307ef73_ppc64le",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:a9e71a818f5bb5afc979df2dd3d9cc6a32a624155bac4a7672789bd2da2394e2_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:e68a0fd8f0a8ba0ccf8c0f973c7e739300a30169ad0def2eaa2fa944fc29ee4b_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:4c3c63c71a4a2c1f28827c1270a2f74f251097296e348f8191ec560b33e42943_arm64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:6759b5f712098d890c6a5124fb513097050f70b54e7e3723df4e74a36a40c3f3_amd64",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:b2c57e67cd87fe061679de42f24c4d4d7ed7dbb0c07eb228db95b2eb6147d9f9_s390x",
"Red Hat OpenShift Service Mesh 3.3:registry.redhat.io/openshift-service-mesh/kiali-rhel9@sha256:bea80650e9959da730b4fcde63752caa549f98759d2dc16009e7f8f44a2501d7_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments"
}
]
}
RHSA-2026:33574
Vulnerability from csaf_redhat - Published: 2026-06-30 15:00 - Updated: 2026-08-10 06:43Summary
Red Hat Security Advisory: Red Hat Developer Hub 1.9.6 release.
Severity
Important
Notes
Topic: Red Hat Developer Hub 1.9.6 has been released.
Details: Red Hat Developer Hub (RHDH) is Red Hat's enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters (AKS, EKS, GKE). The core features of RHDH include a single pane of glass, a centralized software catalog, self-service via golden path templates, and Tech Docs. RHDH is extensible by plugins.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the shell-quote component. The quote() function did not properly validate object-token inputs, allowing line terminators to pass unescaped into the output. A remote attacker could exploit this vulnerability by providing specially crafted input, which a POSIX shell would interpret as a command separator. This could lead to command injection, enabling the attacker to execute arbitrary code on the system.
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64 | — |
Vendor Fix
fix
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64 | — | ||
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64 | — |
Threats
Impact
Important
A flaw was found in json-2-csv. An attacker can bypass the `preventCsvInjection` option to inject malicious formulas into CSV (Comma Separated Values) files. When these manipulated CSV files are opened in spreadsheet applications, the injected formulas can execute, potentially leading to arbitrary code execution or information disclosure.
6.1 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, an HTTP client library. This vulnerability allows an attacker to exploit a prototype pollution issue if another part of the application has already polluted the Object.prototype. By doing so, the attacker can intercept and modify JSON responses or take control of the HTTP communication. This could lead to unauthorized access to sensitive information like user credentials and request details.
7.4 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64 | — |
Vendor Fix
fix
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64 | — | ||
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64 | — |
Threats
Impact
Important
A flaw was found in Axios, a software library for making network requests. A remote attacker can exploit a prototype pollution vulnerability to inject arbitrary HTTP headers into outgoing requests. This occurs when the application's core object definitions are manipulated, causing Axios to misinterpret data and include attacker-controlled headers in network communications. This could lead to unauthorized actions or data manipulation.
7.4 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in Axios, a promise-based HTTP client for browsers and Node.js. This vulnerability occurs because the `toFormData` function recursively processes nested objects without a depth limit. A remote attacker can exploit this by sending deeply nested request data, which causes the Node.js process to crash due to a RangeError, leading to a potential Denial of Service (DoS) if the process crashes.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64 | — |
Vendor Fix
fix
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64 | — | ||
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64 | — |
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability, a Prototype Pollution "Gadget" attack, allows an attacker to manipulate the `Object.prototype.validateStatus` property. By polluting this property, all HTTP error responses (such as 401, 403, or 500) are silently treated as successful responses. This can lead to a complete bypass of application-level authentication and error handling, potentially granting unauthorized access.
8.2 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64 | — |
Vendor Fix
fix
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64 | — | ||
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64 | — |
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. An attacker who can control the destination address of an Axios request can exploit this vulnerability. By using specific internal network addresses (within the 127.0.0.0/8 range, excluding 127.0.0.1), the attacker can completely bypass the NO_PROXY protection, potentially leading to unauthorized access or information disclosure within the network. This issue is an incomplete fix for a previous vulnerability.
7.2 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64 | — |
Vendor Fix
fix
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64 | — | ||
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64 | — |
Threats
Impact
Important
A flaw was found in Axios, a widely used HTTP client. This vulnerability, known as a Prototype Pollution "Gadget" attack, allows a remote attacker to subtly alter JSON API responses. By manipulating a specific function, an attacker can selectively modify data within these responses. This could lead to significant security breaches, including unauthorized privilege escalation, fraudulent balance manipulation, or bypassing critical authorization checks.
7.4 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in ip-address, a JavaScript library for parsing and manipulating IPv4 and IPv6 addresses. This vulnerability allows a remote attacker to perform cross-site scripting (XSS) by providing untrusted input to the Address6 constructor. When an application renders the output of Address6.group(), Address6.link(), or the AddressError.parseMessage as HTML without proper escaping, the attacker-controlled content can be executed in the user's browser.
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.
8.6 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. This vulnerability, a Prototype Pollution "Gadget" attack, allows an attacker to escalate any existing Object.prototype pollution in an application's dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.
8.7 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.
7.0 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in systeminformation, a Node.js library. This vulnerability allows a local attacker on Linux to inject arbitrary commands. This occurs when an active NetworkManager connection profile name contains shell metacharacters, which are not properly sanitized before being used in shell commands. Successful exploitation can lead to arbitrary code execution.
7.8 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in ws, an open source WebSocket client and server for Node.js. The `websocket.close()` implementation is vulnerable to uninitialized memory disclosure when a `TypedArray` is passed as the reason argument. This can lead to the disclosure of sensitive information from uninitialized memory.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64 | — |
Vendor Fix
fix
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64 | — | ||
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64 | — |
Threats
Impact
Important
A flaw was found in vm2, an open-source virtual machine (VM) sandbox for Node.js. A remote attacker can exploit this vulnerability by combining specific Buffer function calls and Node.js's ERR_INVALID_ARG_TYPE error. This allows the attacker to obtain the host's TypeError constructor, leading to an escape from the sandbox. Consequently, this enables attackers to run arbitrary code on the host system.
4.1 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in vm2, an open-source virtual machine (VM) sandbox for Node.js. An attacker within the sandbox could exploit incomplete symbol interception and missing security checks to gain control over the host system. This could allow the attacker to execute arbitrary code outside the sandbox environment, leading to a complete compromise of the host.
8.7 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in vm2, an open-source virtual machine (VM) sandbox for Node.js. A remote attacker could bypass a security check designed to prevent the combination of nested environments and disabled module loading. This bypass occurs because a strict equality check for the `require` option can be circumvented by simply omitting the option, leading to an unintended configuration. Successful exploitation of this vulnerability could allow an attacker to escape the sandbox and achieve arbitrary code execution on the host system.
4.1 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64 | — |
Workaround
|
Threats
Impact
Low
A flaw was found in vm2, a Node.js sandbox. This vulnerability allows sandboxed code to bypass network restrictions by utilizing internal HTTP built-ins, such as _http_client and _http_server. An attacker can exploit this to make outbound HTTP requests or open listening HTTP sockets, even when public network modules are explicitly denied. This could lead to unauthorized information disclosure or further compromise of the system.
8.6 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in vm2, an open-source virtual machine (VM) sandbox for Node.js. This vulnerability allows sandboxed code to bypass intended security restrictions by exploiting missing entries in the denylist for dangerous Node.js built-in functions, specifically `process` and `inspector/promises`. A remote attacker can leverage this to execute arbitrary code in the host process, leading to a complete compromise of the system.
4.1 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64 | — |
Workaround
|
Threats
Impact
Low
A flaw was found in vm2, an open-source virtual machine (VM) sandbox for Node.js. Prior to version 3.11.4, NodeVM, a component of vm2, improperly exposed certain process-wide observability builtins, such as diagnostics_channel, async_hooks, and perf_hooks. These builtins, which are designed for monitoring and debugging, were not adequately blocked by the dangerous builtin denylist. This oversight allowed sandboxed code to observe sensitive host application data, leading to information disclosure across the vm2 security boundary.
8.6 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in vm2, an open-source virtual machine (VM) sandbox for Node.js. This vulnerability allows an attacker to escape the sandbox environment by writing malicious code. Successful exploitation can lead to arbitrary code execution on the host system, compromising the integrity and confidentiality of the system.
6.6 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in vm2, an open-source virtual machine (VM) sandbox for Node.js. This vulnerability allows an attacker to bypass security restrictions by writing dangerous cross-realm Symbol keys to host objects. This can lead to a compromise of the integrity of the host system, potentially enabling arbitrary code execution within the Node.js environment. The issue stems from the BaseHandler.set trap in bridge.js, which incorrectly writes to the host target object even when inherited property assignments should create an own property on the receiver.
8.6 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64 | — |
Vendor Fix
fix
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64 | — | ||
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64 | — |
Threats
Impact
Moderate
A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that consume excessive memory. Consequently, this leads to process termination and a denial of service (DoS) for the remote peer.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64 | — |
Workaround
|
Threats
Impact
Important
References
258 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Developer Hub 1.9.6 has been released.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Developer Hub (RHDH) is Red Hat\u0027s enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters (AKS, EKS, GKE). The core features of RHDH include a single pane of glass, a centralized software catalog, self-service via golden path templates, and Tech Docs. RHDH is extensible by plugins.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:33574",
"url": "https://access.redhat.com/errata/RHSA-2026:33574"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27145",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42033",
"url": "https://access.redhat.com/security/cve/CVE-2026-42033"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42035",
"url": "https://access.redhat.com/security/cve/CVE-2026-42035"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42039",
"url": "https://access.redhat.com/security/cve/CVE-2026-42039"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42041",
"url": "https://access.redhat.com/security/cve/CVE-2026-42041"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42043",
"url": "https://access.redhat.com/security/cve/CVE-2026-42043"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42044",
"url": "https://access.redhat.com/security/cve/CVE-2026-42044"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42338",
"url": "https://access.redhat.com/security/cve/CVE-2026-42338"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44486",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44487",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44488",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44492",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44494",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44495",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44496",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44724",
"url": "https://access.redhat.com/security/cve/CVE-2026-44724"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-45736",
"url": "https://access.redhat.com/security/cve/CVE-2026-45736"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-47131",
"url": "https://access.redhat.com/security/cve/CVE-2026-47131"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-47135",
"url": "https://access.redhat.com/security/cve/CVE-2026-47135"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-47137",
"url": "https://access.redhat.com/security/cve/CVE-2026-47137"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-47139",
"url": "https://access.redhat.com/security/cve/CVE-2026-47139"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-47140",
"url": "https://access.redhat.com/security/cve/CVE-2026-47140"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-47141",
"url": "https://access.redhat.com/security/cve/CVE-2026-47141"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-47208",
"url": "https://access.redhat.com/security/cve/CVE-2026-47208"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-47209",
"url": "https://access.redhat.com/security/cve/CVE-2026-47209"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-48779",
"url": "https://access.redhat.com/security/cve/CVE-2026-48779"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-9277",
"url": "https://access.redhat.com/security/cve/CVE-2026-9277"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-9673",
"url": "https://access.redhat.com/security/cve/CVE-2026-9673"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://catalog.redhat.com/search?gs\u0026searchType=containers\u0026q=rhdh",
"url": "https://catalog.redhat.com/search?gs\u0026searchType=containers\u0026q=rhdh"
},
{
"category": "external",
"summary": "https://developers.redhat.com/rhdh/overview",
"url": "https://developers.redhat.com/rhdh/overview"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_developer_hub",
"url": "https://docs.redhat.com/en/documentation/red_hat_developer_hub"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHDHBUGS-3081",
"url": "https://issues.redhat.com/browse/RHDHBUGS-3081"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHDHBUGS-3369",
"url": "https://issues.redhat.com/browse/RHDHBUGS-3369"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHIDP-13319",
"url": "https://issues.redhat.com/browse/RHIDP-13319"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHIDP-13408",
"url": "https://issues.redhat.com/browse/RHIDP-13408"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHIDP-13446",
"url": "https://issues.redhat.com/browse/RHIDP-13446"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHIDP-13451",
"url": "https://issues.redhat.com/browse/RHIDP-13451"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHIDP-13457",
"url": "https://issues.redhat.com/browse/RHIDP-13457"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHIDP-13488",
"url": "https://issues.redhat.com/browse/RHIDP-13488"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHIDP-13966",
"url": "https://issues.redhat.com/browse/RHIDP-13966"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHIDP-14572",
"url": "https://issues.redhat.com/browse/RHIDP-14572"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHIDP-14597",
"url": "https://issues.redhat.com/browse/RHIDP-14597"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHIDP-14703",
"url": "https://issues.redhat.com/browse/RHIDP-14703"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHIDP-14733",
"url": "https://issues.redhat.com/browse/RHIDP-14733"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHIDP-14735",
"url": "https://issues.redhat.com/browse/RHIDP-14735"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHIDP-14736",
"url": "https://issues.redhat.com/browse/RHIDP-14736"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHIDP-14738",
"url": "https://issues.redhat.com/browse/RHIDP-14738"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHIDP-14740",
"url": "https://issues.redhat.com/browse/RHIDP-14740"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHIDP-14743",
"url": "https://issues.redhat.com/browse/RHIDP-14743"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHIDP-14744",
"url": "https://issues.redhat.com/browse/RHIDP-14744"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHIDP-14831",
"url": "https://issues.redhat.com/browse/RHIDP-14831"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHIDP-14835",
"url": "https://issues.redhat.com/browse/RHIDP-14835"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHIDP-14837",
"url": "https://issues.redhat.com/browse/RHIDP-14837"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHIDP-14895",
"url": "https://issues.redhat.com/browse/RHIDP-14895"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHIDP-14936",
"url": "https://issues.redhat.com/browse/RHIDP-14936"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHIDP-14937",
"url": "https://issues.redhat.com/browse/RHIDP-14937"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHIDP-14939",
"url": "https://issues.redhat.com/browse/RHIDP-14939"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHIDP-14941",
"url": "https://issues.redhat.com/browse/RHIDP-14941"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHIDP-14943",
"url": "https://issues.redhat.com/browse/RHIDP-14943"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHIDP-15033",
"url": "https://issues.redhat.com/browse/RHIDP-15033"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHIDP-15039",
"url": "https://issues.redhat.com/browse/RHIDP-15039"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHIDP-15042",
"url": "https://issues.redhat.com/browse/RHIDP-15042"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHIDP-15067",
"url": "https://issues.redhat.com/browse/RHIDP-15067"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHIDP-15073",
"url": "https://issues.redhat.com/browse/RHIDP-15073"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHIDP-15145",
"url": "https://issues.redhat.com/browse/RHIDP-15145"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_33574.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Developer Hub 1.9.6 release.",
"tracking": {
"current_release_date": "2026-08-10T06:43:29+00:00",
"generator": {
"date": "2026-08-10T06:43:29+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.12"
}
},
"id": "RHSA-2026:33574",
"initial_release_date": "2026-06-30T15:00:33+00:00",
"revision_history": [
{
"date": "2026-06-30T15:00:33+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-08T04:36:23+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-10T06:43:29+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Developer Hub 1.9",
"product": {
"name": "Red Hat Developer Hub 1.9",
"product_id": "Red Hat Developer Hub 1.9",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhdh:1.9::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Developer Hub"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
"product": {
"name": "registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
"product_id": "registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhdh-hub-rhel9@sha256%3A044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c?arch=amd64\u0026repository_url=registry.redhat.io/rhdh/rhdh-hub-rhel9\u0026tag=1782761244"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64",
"product": {
"name": "registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64",
"product_id": "registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhdh-rhel9-operator@sha256%3A219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785?arch=amd64\u0026repository_url=registry.redhat.io/rhdh/rhdh-rhel9-operator\u0026tag=1782767215"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"product": {
"name": "registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"product_id": "registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhdh-operator-bundle@sha256%3A66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893?arch=amd64\u0026repository_url=registry.redhat.io/rhdh/rhdh-operator-bundle\u0026tag=1782772967"
}
}
}
],
"category": "architecture",
"name": "amd64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64 as a component of Red Hat Developer Hub 1.9",
"product_id": "Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64"
},
"product_reference": "registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
"relates_to_product_reference": "Red Hat Developer Hub 1.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64 as a component of Red Hat Developer Hub 1.9",
"product_id": "Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64"
},
"product_reference": "registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"relates_to_product_reference": "Red Hat Developer Hub 1.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64 as a component of Red Hat Developer Hub 1.9",
"product_id": "Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
},
"product_reference": "registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64",
"relates_to_product_reference": "Red Hat Developer Hub 1.9"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-9277",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2026-05-22T14:01:14.427751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480741"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the shell-quote component. The quote() function did not properly validate object-token inputs, allowing line terminators to pass unescaped into the output. A remote attacker could exploit this vulnerability by providing specially crafted input, which a POSIX shell would interpret as a command separator. This could lead to command injection, enabling the attacker to execute arbitrary code on the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "shell-quote: shell-quote: Arbitrary code execution via command injection due to unescaped line terminators",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-9277"
},
{
"category": "external",
"summary": "RHBZ#2480741",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480741"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-9277",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9277"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-9277",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9277"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote",
"url": "https://github.com/ljharb/shell-quote"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote/commit/1518179",
"url": "https://github.com/ljharb/shell-quote/commit/1518179"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote/security/advisories/GHSA-w7jw-789q-3m8p",
"url": "https://github.com/ljharb/shell-quote/security/advisories/GHSA-w7jw-789q-3m8p"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/shell-quote",
"url": "https://www.npmjs.com/package/shell-quote"
}
],
"release_date": "2026-05-22T13:22:38.873000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-30T15:00:33+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33574"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "shell-quote: shell-quote: Arbitrary code execution via command injection due to unescaped line terminators"
},
{
"cve": "CVE-2026-9673",
"cwe": {
"id": "CWE-1236",
"name": "Improper Neutralization of Formula Elements in a CSV File"
},
"discovery_date": "2026-05-28T06:01:00.245616+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2482486"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in json-2-csv. An attacker can bypass the `preventCsvInjection` option to inject malicious formulas into CSV (Comma Separated Values) files. When these manipulated CSV files are opened in spreadsheet applications, the injected formulas can execute, potentially leading to arbitrary code execution or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "json-2-csv: json-2-csv: CSV Injection vulnerability allows arbitrary code execution via `preventCsvInjection` bypass.",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate vulnerability in `json-2-csv` allows for CSV Injection due to a bypass in the `preventCsvInjection` option. While exploitation requires a user to open a specially crafted CSV file in a spreadsheet application, successful attacks could lead to arbitrary code execution or information disclosure. This affects Red Hat Developer Hub and Red Hat Ansible Automation Platform when processing untrusted data that is subsequently exported to CSV and opened by a user.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-9673"
},
{
"category": "external",
"summary": "RHBZ#2482486",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2482486"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-9673",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9673"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-9673",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9673"
},
{
"category": "external",
"summary": "https://gist.github.com/whoamins/299745a2d36b482b44e9613b78e40613",
"url": "https://gist.github.com/whoamins/299745a2d36b482b44e9613b78e40613"
},
{
"category": "external",
"summary": "https://github.com/mrodrig/json-2-csv/blob/main/src/json2csv.ts%23L410",
"url": "https://github.com/mrodrig/json-2-csv/blob/main/src/json2csv.ts%23L410"
},
{
"category": "external",
"summary": "https://github.com/mrodrig/json-2-csv/commit/0fdd0bb6d0273178cd940afc323ccbce19688229",
"url": "https://github.com/mrodrig/json-2-csv/commit/0fdd0bb6d0273178cd940afc323ccbce19688229"
},
{
"category": "external",
"summary": "https://security.snyk.io/vuln/SNYK-JS-JSON2CSV-14221326",
"url": "https://security.snyk.io/vuln/SNYK-JS-JSON2CSV-14221326"
}
],
"release_date": "2026-05-28T05:00:02.387000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-30T15:00:33+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33574"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "json-2-csv: json-2-csv: CSV Injection vulnerability allows arbitrary code execution via `preventCsvInjection` bypass."
},
{
"cve": "CVE-2026-27145",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-02T23:01:08.992540+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "RHBZ#2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://go.dev/cl/783621",
"url": "https://go.dev/cl/783621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79694",
"url": "https://go.dev/issue/79694"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5037",
"url": "https://pkg.go.dev/vuln/GO-2026-5037"
}
],
"release_date": "2026-06-02T22:01:36.954000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-30T15:00:33+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33574"
},
{
"category": "workaround",
"details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-30T15:00:33+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33574"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-30T15:00:33+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33574"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-42033",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-04-24T18:01:20.937507+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2461607"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, an HTTP client library. This vulnerability allows an attacker to exploit a prototype pollution issue if another part of the application has already polluted the Object.prototype. By doing so, the attacker can intercept and modify JSON responses or take control of the HTTP communication. This could lead to unauthorized access to sensitive information like user credentials and request details.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: HTTP Transport Hijacking via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42033"
},
{
"category": "external",
"summary": "RHBZ#2461607",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461607"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42033",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42033"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42033",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42033"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-pf86-5x62-jrwf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-pf86-5x62-jrwf"
}
],
"release_date": "2026-04-24T17:36:44.132000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-30T15:00:33+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33574"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: HTTP Transport Hijacking via Prototype Pollution"
},
{
"cve": "CVE-2026-42035",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-04-24T18:01:17.109481+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2461606"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a software library for making network requests. A remote attacker can exploit a prototype pollution vulnerability to inject arbitrary HTTP headers into outgoing requests. This occurs when the application\u0027s core object definitions are manipulated, causing Axios to misinterpret data and include attacker-controlled headers in network communications. This could lead to unauthorized actions or data manipulation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Arbitrary HTTP header injection via prototype pollution",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42035"
},
{
"category": "external",
"summary": "RHBZ#2461606",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461606"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42035",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42035"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42035",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42035"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-6chq-wfr3-2hj9",
"url": "https://github.com/axios/axios/security/advisories/GHSA-6chq-wfr3-2hj9"
}
],
"release_date": "2026-04-24T17:38:07.752000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-30T15:00:33+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33574"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "axios: Axios: Arbitrary HTTP header injection via prototype pollution"
},
{
"cve": "CVE-2026-42039",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-24T19:01:44.887156+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2461630"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client for browsers and Node.js. This vulnerability occurs because the `toFormData` function recursively processes nested objects without a depth limit. A remote attacker can exploit this by sending deeply nested request data, which causes the Node.js process to crash due to a RangeError, leading to a potential Denial of Service (DoS) if the process crashes.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Node.js: Axios: Denial of Service via unbounded recursion in toFormData with deeply nested request data",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42039"
},
{
"category": "external",
"summary": "RHBZ#2461630",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461630"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42039",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42039"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42039",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42039"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-62hf-57xw-28j9",
"url": "https://github.com/axios/axios/security/advisories/GHSA-62hf-57xw-28j9"
}
],
"release_date": "2026-04-24T18:01:30.775000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-30T15:00:33+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33574"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Node.js: Axios: Denial of Service via unbounded recursion in toFormData with deeply nested request data"
},
{
"cve": "CVE-2026-42041",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-04-24T19:01:41.034289+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2461629"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability, a Prototype Pollution \"Gadget\" attack, allows an attacker to manipulate the `Object.prototype.validateStatus` property. By polluting this property, all HTTP error responses (such as 401, 403, or 500) are silently treated as successful responses. This can lead to a complete bypass of application-level authentication and error handling, potentially granting unauthorized access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Authentication bypass due to prototype pollution of HTTP error handling",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42041"
},
{
"category": "external",
"summary": "RHBZ#2461629",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461629"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42041",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42041"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42041",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42041"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-w9j2-pvgh-6h63",
"url": "https://github.com/axios/axios/security/advisories/GHSA-w9j2-pvgh-6h63"
}
],
"release_date": "2026-04-24T17:55:30.036000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-30T15:00:33+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33574"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Authentication bypass due to prototype pollution of HTTP error handling"
},
{
"cve": "CVE-2026-42043",
"cwe": {
"id": "CWE-918",
"name": "Server-Side Request Forgery (SSRF)"
},
"discovery_date": "2026-04-24T19:01:22.552379+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2461626"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. An attacker who can control the destination address of an Axios request can exploit this vulnerability. By using specific internal network addresses (within the 127.0.0.0/8 range, excluding 127.0.0.1), the attacker can completely bypass the NO_PROXY protection, potentially leading to unauthorized access or information disclosure within the network. This issue is an incomplete fix for a previous vulnerability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: NO_PROXY bypass via crafted URL",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42043"
},
{
"category": "external",
"summary": "RHBZ#2461626",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461626"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42043",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42043"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42043",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42043"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-pmwg-cvhr-8vh7",
"url": "https://github.com/axios/axios/security/advisories/GHSA-pmwg-cvhr-8vh7"
}
],
"release_date": "2026-04-24T17:54:42.668000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-30T15:00:33+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33574"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: NO_PROXY bypass via crafted URL"
},
{
"cve": "CVE-2026-42044",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-04-24T19:01:13.418725+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2461624"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a widely used HTTP client. This vulnerability, known as a Prototype Pollution \"Gadget\" attack, allows a remote attacker to subtly alter JSON API responses. By manipulating a specific function, an attacker can selectively modify data within these responses. This could lead to significant security breaches, including unauthorized privilege escalation, fraudulent balance manipulation, or bypassing critical authorization checks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42044"
},
{
"category": "external",
"summary": "RHBZ#2461624",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461624"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42044",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42044"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42044",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42044"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3w6x-2g7m-8v23",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3w6x-2g7m-8v23"
}
],
"release_date": "2026-04-24T17:49:49.517000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-30T15:00:33+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33574"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget"
},
{
"cve": "CVE-2026-42338",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-12T21:01:14.436876+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2476810"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ip-address, a JavaScript library for parsing and manipulating IPv4 and IPv6 addresses. This vulnerability allows a remote attacker to perform cross-site scripting (XSS) by providing untrusted input to the Address6 constructor. When an application renders the output of Address6.group(), Address6.link(), or the AddressError.parseMessage as HTML without proper escaping, the attacker-controlled content can be executed in the user\u0027s browser.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in the `ip-address` JavaScript library is rated as Important. It allows for cross-site scripting (XSS) when an application processes untrusted input through the `Address6` constructor and subsequently renders the unescaped output of methods like `Address6.group()`, `Address6.link()`, or `AddressError.parseMessage` directly as HTML. While the library itself is affected, exploitation is contingent on specific application-level rendering practices that may not be common in Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42338"
},
{
"category": "external",
"summary": "RHBZ#2476810",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2476810"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42338",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42338"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42338",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42338"
},
{
"category": "external",
"summary": "https://github.com/beaugunderson/ip-address/security/advisories/GHSA-v2v4-37r5-5v8g",
"url": "https://github.com/beaugunderson/ip-address/security/advisories/GHSA-v2v4-37r5-5v8g"
}
],
"release_date": "2026-05-12T19:43:16.470000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-30T15:00:33+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33574"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-30T15:00:33+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33574"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
},
{
"cve": "CVE-2026-44486",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:30.944384+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487947"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in the Axios Node.js HTTP adapter. Red Hat products utilizing Axios in a Node.js environment with an authenticated proxy and automatic redirects enabled are susceptible. The vulnerability arises when a request, initially sent through an authenticated proxy, is redirected to a target that no longer uses the proxy, potentially leaking `Proxy-Authorization` headers containing sensitive credentials to an untrusted remote server. This risk is heightened in deployments where applications interact with untrusted HTTP origins.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "RHBZ#2487947",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487947"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44486",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44486"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc",
"url": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc"
}
],
"release_date": "2026-06-11T15:39:07.714000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-30T15:00:33+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33574"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects"
},
{
"cve": "CVE-2026-44487",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:34.091476+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487948"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via redirect flows",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in Axios affecting Node.js environments. When an application uses Axios with an authenticated HTTP proxy and follows redirects from an HTTP to a non-proxied HTTPS destination, the Proxy-Authorization header may be inadvertently sent to the final origin server. This could lead to the exposure of sensitive proxy credentials to an unintended third party.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "RHBZ#2487948",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487948"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44487",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44487"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v",
"url": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v"
}
],
"release_date": "2026-06-11T15:38:25.150000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-30T15:00:33+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33574"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via redirect flows"
},
{
"cve": "CVE-2026-44488",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-11T17:01:36.836488+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487949"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Denial of Service due to unenforced request and response size limits",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A denial of service flaw was found in Axios, a JavaScript HTTP client library. This issue arises when applications utilize the `fetch` adapter, as configured request and response size limits are not properly enforced. A remote attacker could exploit this by sending or receiving excessively large data bodies, leading to resource exhaustion and potential denial of service in affected server-side applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "RHBZ#2487949",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487949"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf"
}
],
"release_date": "2026-06-11T15:37:38.013000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-30T15:00:33+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33574"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Denial of Service due to unenforced request and response size limits"
},
{
"cve": "CVE-2026-44492",
"cwe": {
"id": "CWE-289",
"name": "Authentication Bypass by Alternate Name"
},
"discovery_date": "2026-06-11T17:00:56.761751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487938"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Axios, a JavaScript HTTP client library, that allows for a proxy bypass. When a `NO_PROXY` environment variable is configured to prevent direct connections to specific IPv4 addresses, an attacker can craft a request URL using the IPv4-mapped IPv6 address format. This bypasses the intended `NO_PROXY` exclusion, routing the request through the configured proxy and potentially exposing internal services or sensitive information, such as cloud instance metadata credentials.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "RHBZ#2487938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487938"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44492"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv",
"url": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv"
}
],
"release_date": "2026-06-11T15:29:13.890000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-30T15:00:33+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33574"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization"
},
{
"cve": "CVE-2026-44494",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:01:12.945664+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487942"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. This vulnerability, a Prototype Pollution \"Gadget\" attack, allows an attacker to escalate any existing Object.prototype pollution in an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the Axios library allows an attacker to escalate existing prototype pollution vulnerabilities within an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. By injecting a malicious proxy configuration into the `Object.prototype`, an attacker can intercept, read, and modify all HTTP traffic, including sensitive authentication credentials, without direct user interaction. This poses a significant risk to data confidentiality and integrity in Red Hat products that utilize the Axios library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "RHBZ#2487942",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487942"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44494",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44494"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh",
"url": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh"
}
],
"release_date": "2026-06-11T15:32:03.155000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-30T15:00:33+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33574"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution"
},
{
"cve": "CVE-2026-44495",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:00:53.999811+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487937"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure due to prototype pollution vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Axios, a promise-based HTTP client, can lead to information disclosure, including credential theft and response hijacking, or denial of service. Exploitation requires a separate prototype pollution vulnerability in the same JavaScript process, allowing an attacker to control `Object.prototype.transformResponse`. Red Hat products using affected Axios versions are at risk if another component introduces such pollution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "RHBZ#2487937",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487937"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44495",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw"
}
],
"release_date": "2026-06-11T15:33:12.433000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-30T15:00:33+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33574"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure due to prototype pollution vulnerability"
},
{
"cve": "CVE-2026-44496",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-06-11T17:01:15.856386+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487943"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in Axios can lead to a client-side Denial of Service. An attacker capable of influencing the XSRF cookie name within a browser environment could trigger excessive regular expression processing, causing the affected browser tab to freeze and degrade user availability. This issue specifically impacts browser-based applications and does not affect Node.js HTTP adapter usage, React Native, or web workers.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "RHBZ#2487943",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487943"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44496",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44496"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf"
}
],
"release_date": "2026-06-11T15:34:28.492000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-30T15:00:33+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33574"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name"
},
{
"cve": "CVE-2026-44724",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2026-05-27T21:02:14.837088+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2482416"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in systeminformation, a Node.js library. This vulnerability allows a local attacker on Linux to inject arbitrary commands. This occurs when an active NetworkManager connection profile name contains shell metacharacters, which are not properly sanitized before being used in shell commands. Successful exploitation can lead to arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "systeminformation: systeminformation: Command injection via NetworkManager connection profile name",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the `systeminformation` Node.js library allows a local attacker to achieve arbitrary command execution on Linux systems. The vulnerability arises when an active NetworkManager connection profile name contains shell metacharacters, which are not properly sanitized before being processed by the library. Exploitation requires the attacker to have privileges to create or rename NetworkManager connection profiles.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44724"
},
{
"category": "external",
"summary": "RHBZ#2482416",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2482416"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44724",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44724"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44724",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44724"
},
{
"category": "external",
"summary": "https://github.com/sebhildebrandt/systeminformation/security/advisories/GHSA-hvx9-hwr7-wjj9",
"url": "https://github.com/sebhildebrandt/systeminformation/security/advisories/GHSA-hvx9-hwr7-wjj9"
}
],
"release_date": "2026-05-27T19:26:28.392000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-30T15:00:33+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33574"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "systeminformation: systeminformation: Command injection via NetworkManager connection profile name"
},
{
"cve": "CVE-2026-45736",
"cwe": {
"id": "CWE-824",
"name": "Access of Uninitialized Pointer"
},
"discovery_date": "2026-05-15T16:00:55.786944+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477914"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ws, an open source WebSocket client and server for Node.js. The `websocket.close()` implementation is vulnerable to uninitialized memory disclosure when a `TypedArray` is passed as the reason argument. This can lead to the disclosure of sensitive information from uninitialized memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray`",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in the `ws` WebSocket library for Node.js could lead to sensitive information disclosure. The flaw occurs when a `TypedArray` is specifically provided as the `reason` argument to the `websocket.close()` function, potentially exposing uninitialized memory. Red Hat products utilizing this library may be affected if their implementations allow for such a crafted `close()` call.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45736"
},
{
"category": "external",
"summary": "RHBZ#2477914",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477914"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45736",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45736"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45736",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45736"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/c0327ec15a54d701eb6ccefaa8bef328cfc03086",
"url": "https://github.com/websockets/ws/commit/c0327ec15a54d701eb6ccefaa8bef328cfc03086"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/security/advisories/GHSA-58qx-3vcg-4xpx",
"url": "https://github.com/websockets/ws/security/advisories/GHSA-58qx-3vcg-4xpx"
}
],
"release_date": "2026-05-15T14:53:57.263000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-30T15:00:33+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33574"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray`"
},
{
"cve": "CVE-2026-47131",
"cwe": {
"id": "CWE-843",
"name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
},
"discovery_date": "2026-06-12T15:01:52.744009+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488393"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in vm2, an open-source virtual machine (VM) sandbox for Node.js. A remote attacker can exploit this vulnerability by combining specific Buffer function calls and Node.js\u0027s ERR_INVALID_ARG_TYPE error. This allows the attacker to obtain the host\u0027s TypeError constructor, leading to an escape from the sandbox. Consequently, this enables attackers to run arbitrary code on the host system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vm2: vm2: Arbitrary code execution via sandbox escape vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The Red Hat Product Security team has rated the impact of this vulnerability as Moderate in Red Hat Developer Hub and Ansible Automation Platform.The affected package is present in both products as a transitive dependency; however, the vulnerable sandbox functionality is not invoked in any production code path. The active sandboxing mechanism used by both products does not rely on this package, and user-supplied input cannot reach the vulnerable code under a standard deployment. Exploitation would require an attacker to independently route arbitrary JavaScript into the sandbox runtime, a condition not present in the default configuration of either product.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-47131"
},
{
"category": "external",
"summary": "RHBZ#2488393",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488393"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-47131",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47131"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47131",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47131"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/commit/27c525f4615e2b983f122e2bed327d810126f5c8",
"url": "https://github.com/patriksimek/vm2/commit/27c525f4615e2b983f122e2bed327d810126f5c8"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/releases/tag/v3.11.4",
"url": "https://github.com/patriksimek/vm2/releases/tag/v3.11.4"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/security/advisories/GHSA-v6mx-mf47-r5wg",
"url": "https://github.com/patriksimek/vm2/security/advisories/GHSA-v6mx-mf47-r5wg"
}
],
"release_date": "2026-06-12T14:14:17.037000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-30T15:00:33+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33574"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "vm2: vm2: Arbitrary code execution via sandbox escape vulnerability"
},
{
"cve": "CVE-2026-47135",
"cwe": {
"id": "CWE-1100",
"name": "Insufficient Isolation of System-Dependent Functions"
},
"discovery_date": "2026-06-12T15:02:02.154869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488396"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in vm2, an open-source virtual machine (VM) sandbox for Node.js. An attacker within the sandbox could exploit incomplete symbol interception and missing security checks to gain control over the host system. This could allow the attacker to execute arbitrary code outside the sandbox environment, leading to a complete compromise of the host.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vm2: vm2: Sandbox escape allows arbitrary code execution on the host system",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability has been rated as Moderate for Red Hat Developer Hub and Red Hat Ansible Automation Platform. The vm2 sandbox exists as a transitive dependency in Red Hat Developer Hub and is only utilized during build time. The sandbox is therefore not exposed on the production code path. Exploitation of this vulnerability requires attackers to write cross-realm symbol keys to host objects which is not possible in the default configuration of Red Hat Developer Hub.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-47135"
},
{
"category": "external",
"summary": "RHBZ#2488396",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488396"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-47135",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47135"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47135",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47135"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/commit/928aef51898b5c52a05f05a40c4cfeb52e172878",
"url": "https://github.com/patriksimek/vm2/commit/928aef51898b5c52a05f05a40c4cfeb52e172878"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/releases/tag/v3.11.4",
"url": "https://github.com/patriksimek/vm2/releases/tag/v3.11.4"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/security/advisories/GHSA-m5q2-4fm3-vfqp",
"url": "https://github.com/patriksimek/vm2/security/advisories/GHSA-m5q2-4fm3-vfqp"
}
],
"release_date": "2026-06-12T14:14:42.022000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-30T15:00:33+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33574"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "vm2: vm2: Sandbox escape allows arbitrary code execution on the host system"
},
{
"cve": "CVE-2026-47137",
"cwe": {
"id": "CWE-480",
"name": "Use of Incorrect Operator"
},
"discovery_date": "2026-06-12T15:01:24.611905+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488385"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in vm2, an open-source virtual machine (VM) sandbox for Node.js. A remote attacker could bypass a security check designed to prevent the combination of nested environments and disabled module loading. This bypass occurs because a strict equality check for the `require` option can be circumvented by simply omitting the option, leading to an unintended configuration. Successful exploitation of this vulnerability could allow an attacker to escape the sandbox and achieve arbitrary code execution on the host system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vm2: vm2: Sandbox escape leading to arbitrary code execution via security bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The Red Hat Product Security team has rated the impact of this vulnerability as Moderate in Red Hat Developer Hub and Ansible Automation Platform.The affected package is present in both products as a transitive dependency; however, the vulnerable sandbox functionality is not invoked in any production code path. The active sandboxing mechanism used by both products does not rely on this package, and user-supplied input cannot reach the vulnerable code under a standard deployment. Exploitation would require an attacker to independently route arbitrary JavaScript into the sandbox runtime, a condition not present in the default configuration of either product.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-47137"
},
{
"category": "external",
"summary": "RHBZ#2488385",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488385"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-47137",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47137"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47137",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47137"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-g644-9gfx-q4q4",
"url": "https://github.com/advisories/GHSA-g644-9gfx-q4q4"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/commit/01a7552add345d5a6862623884e6b79a85bf0568",
"url": "https://github.com/patriksimek/vm2/commit/01a7552add345d5a6862623884e6b79a85bf0568"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/commit/86ab819f202c3a8dad88cef5705f2e416c5188d7",
"url": "https://github.com/patriksimek/vm2/commit/86ab819f202c3a8dad88cef5705f2e416c5188d7"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/releases/tag/v3.11.4",
"url": "https://github.com/patriksimek/vm2/releases/tag/v3.11.4"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/security/advisories/GHSA-m4wx-m65x-ghrr",
"url": "https://github.com/patriksimek/vm2/security/advisories/GHSA-m4wx-m65x-ghrr"
}
],
"release_date": "2026-06-12T14:15:34.795000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-30T15:00:33+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33574"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "vm2: vm2: Sandbox escape leading to arbitrary code execution via security bypass"
},
{
"cve": "CVE-2026-47139",
"cwe": {
"id": "CWE-1100",
"name": "Insufficient Isolation of System-Dependent Functions"
},
"discovery_date": "2026-06-12T15:01:31.104545+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488387"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in vm2, a Node.js sandbox. This vulnerability allows sandboxed code to bypass network restrictions by utilizing internal HTTP built-ins, such as _http_client and _http_server. An attacker can exploit this to make outbound HTTP requests or open listening HTTP sockets, even when public network modules are explicitly denied. This could lead to unauthorized information disclosure or further compromise of the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vm2: vm2: Sandbox escape via internal HTTP built-ins leading to network restriction bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability has been rated as Moderate for Red Hat Developer Hub and Red Hat Ansible Automation Platform. The vm2 sandbox exists as a transitive dependency in Red Hat Developer Hub and is only utilized during build time. The sandbox is therefore not exposed on the production code path. Exploitation of this vulnerability requires attackers to access internal HTTP built-ins which is not possible in the default configuration of Red Hat Developer Hub.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-47139"
},
{
"category": "external",
"summary": "RHBZ#2488387",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488387"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-47139",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47139"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47139",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47139"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/commit/436053e30eecbabd487e2fd2959c137ac34e2bb1",
"url": "https://github.com/patriksimek/vm2/commit/436053e30eecbabd487e2fd2959c137ac34e2bb1"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/releases/tag/v3.11.4",
"url": "https://github.com/patriksimek/vm2/releases/tag/v3.11.4"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/security/advisories/GHSA-r9pm-gxmw-wv6p",
"url": "https://github.com/patriksimek/vm2/security/advisories/GHSA-r9pm-gxmw-wv6p"
}
],
"release_date": "2026-06-12T14:15:44.652000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-30T15:00:33+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33574"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "vm2: vm2: Sandbox escape via internal HTTP built-ins leading to network restriction bypass"
},
{
"cve": "CVE-2026-47140",
"cwe": {
"id": "CWE-184",
"name": "Incomplete List of Disallowed Inputs"
},
"discovery_date": "2026-06-12T15:01:11.705175+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488381"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in vm2, an open-source virtual machine (VM) sandbox for Node.js. This vulnerability allows sandboxed code to bypass intended security restrictions by exploiting missing entries in the denylist for dangerous Node.js built-in functions, specifically `process` and `inspector/promises`. A remote attacker can leverage this to execute arbitrary code in the host process, leading to a complete compromise of the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vm2: vm2: Arbitrary code execution due to incomplete sandbox restrictions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The Red Hat Product Security team has rated the impact of this vulnerability as Moderate in Red Hat Developer Hub and Ansible Automation Platform.The affected package is present in both products as a transitive dependency; however, the vulnerable sandbox functionality is not invoked in any production code path. The active sandboxing mechanism used by both products does not rely on this package, and user-supplied input cannot reach the vulnerable code under a standard deployment. Exploitation would require an attacker to independently route arbitrary JavaScript into the sandbox runtime, a condition not present in the default configuration of either product.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-47140"
},
{
"category": "external",
"summary": "RHBZ#2488381",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488381"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-47140",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47140"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47140",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47140"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/commit/a1ed47a98d1cc36cb48c0d566d55889688e0b59b",
"url": "https://github.com/patriksimek/vm2/commit/a1ed47a98d1cc36cb48c0d566d55889688e0b59b"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/releases/tag/v3.11.4",
"url": "https://github.com/patriksimek/vm2/releases/tag/v3.11.4"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/security/advisories/GHSA-rp36-8xq3-r6c4",
"url": "https://github.com/patriksimek/vm2/security/advisories/GHSA-rp36-8xq3-r6c4"
}
],
"release_date": "2026-06-12T14:16:10.727000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-30T15:00:33+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33574"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "vm2: vm2: Arbitrary code execution due to incomplete sandbox restrictions"
},
{
"cve": "CVE-2026-47141",
"cwe": {
"id": "CWE-653",
"name": "Improper Isolation or Compartmentalization"
},
"discovery_date": "2026-06-12T15:01:05.444374+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488379"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in vm2, an open-source virtual machine (VM) sandbox for Node.js. Prior to version 3.11.4, NodeVM, a component of vm2, improperly exposed certain process-wide observability builtins, such as diagnostics_channel, async_hooks, and perf_hooks. These builtins, which are designed for monitoring and debugging, were not adequately blocked by the dangerous builtin denylist. This oversight allowed sandboxed code to observe sensitive host application data, leading to information disclosure across the vm2 security boundary.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vm2: vm2: NodeVM observability builtins leak host process and HTTP request data",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability has been rated as Moderate for Red Hat Developer Hub and Red Hat Ansible Automation Platform. The vm2 sandbox exists as a transitive dependency in Red Hat Developer Hub and is only utilized during build time. The sandbox is therefore not exposed on the production code path. Exploitation of this vulnerability requires attackers to access process-wide observability builtins which is not possible in the default configuration of Red Hat Developer Hub.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-47141"
},
{
"category": "external",
"summary": "RHBZ#2488379",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488379"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-47141",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47141"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47141",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47141"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/commit/e1c48fce05189f48e71efbd32af0754efa4066bb",
"url": "https://github.com/patriksimek/vm2/commit/e1c48fce05189f48e71efbd32af0754efa4066bb"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/releases/tag/v3.11.4",
"url": "https://github.com/patriksimek/vm2/releases/tag/v3.11.4"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/security/advisories/GHSA-9g8x-92q2-p28f",
"url": "https://github.com/patriksimek/vm2/security/advisories/GHSA-9g8x-92q2-p28f"
}
],
"release_date": "2026-06-12T14:17:35.970000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-30T15:00:33+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33574"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "vm2: vm2: NodeVM observability builtins leak host process and HTTP request data"
},
{
"cve": "CVE-2026-47208",
"discovery_date": "2026-06-12T15:01:14.630546+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488382"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in vm2, an open-source virtual machine (VM) sandbox for Node.js. This vulnerability allows an attacker to escape the sandbox environment by writing malicious code. Successful exploitation can lead to arbitrary code execution on the host system, compromising the integrity and confidentiality of the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vm2: vm2: Sandbox Breakout Using Promise Species",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation requires an attacker to supply untrusted malicious code to the vm2 sandbox, which is easily achieved since the component\u0027s main purpose is to execute untrusted code.\n\nEscaping the sandbox completely bypasses the intended security boundaries, leading directly to arbitrary code execution on the host system and a full compromise of confidentiality and integrity",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-47208"
},
{
"category": "external",
"summary": "RHBZ#2488382",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488382"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-47208",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47208"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47208",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47208"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/commit/a462655009669c3124ee39498121651597529ea8",
"url": "https://github.com/patriksimek/vm2/commit/a462655009669c3124ee39498121651597529ea8"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/releases/tag/v3.11.4",
"url": "https://github.com/patriksimek/vm2/releases/tag/v3.11.4"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/security/advisories/GHSA-76w7-j9cq-rx2j",
"url": "https://github.com/patriksimek/vm2/security/advisories/GHSA-76w7-j9cq-rx2j"
}
],
"release_date": "2026-06-12T14:16:22.726000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-30T15:00:33+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33574"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "vm2: vm2: Sandbox Breakout Using Promise Species"
},
{
"cve": "CVE-2026-47209",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-12T15:02:05.339635+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488397"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in vm2, an open-source virtual machine (VM) sandbox for Node.js. This vulnerability allows an attacker to bypass security restrictions by writing dangerous cross-realm Symbol keys to host objects. This can lead to a compromise of the integrity of the host system, potentially enabling arbitrary code execution within the Node.js environment. The issue stems from the BaseHandler.set trap in bridge.js, which incorrectly writes to the host target object even when inherited property assignments should create an own property on the receiver.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vm2: vm2: Integrity bypass via incorrect property assignment leading to potential arbitrary code execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability has been rated as Moderate for Red Hat Developer Hub and Red Hat Ansible Automation Platform. The vm2 sandbox exists as a transitive dependency in Red Hat Developer Hub and is only utilized during build time. The sandbox is therefore not exposed on the production code path. Exploitation of this vulnerability requires attackers to write cross-realm symbol keys to host objects which is not possible in the default configuration of Red Hat Developer Hub.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-47209"
},
{
"category": "external",
"summary": "RHBZ#2488397",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488397"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-47209",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47209"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47209",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47209"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/commit/26d0318b5e6555be4b187ba05d6cf378ccecfe22",
"url": "https://github.com/patriksimek/vm2/commit/26d0318b5e6555be4b187ba05d6cf378ccecfe22"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/releases/tag/v3.11.4",
"url": "https://github.com/patriksimek/vm2/releases/tag/v3.11.4"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/security/advisories/GHSA-c4cf-2hgv-2qv6",
"url": "https://github.com/patriksimek/vm2/security/advisories/GHSA-c4cf-2hgv-2qv6"
}
],
"release_date": "2026-06-12T14:14:06.455000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-30T15:00:33+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33574"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "vm2: vm2: Integrity bypass via incorrect property assignment leading to potential arbitrary code execution"
},
{
"cve": "CVE-2026-48779",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-16T22:01:24.571224+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2489661"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that consume excessive memory. Consequently, this leads to process termination and a denial of service (DoS) for the remote peer.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `ws` WebSocket library. A remote attacker can exploit this flaw by sending a high volume of small, fragmented data, leading to excessive memory consumption and subsequent process termination. This can result in service disruption for Red Hat products that utilize `ws` for WebSocket communication.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48779"
},
{
"category": "external",
"summary": "RHBZ#2489661",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489661"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48779",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48779"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48779",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48779"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7",
"url": "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53",
"url": "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94",
"url": "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8",
"url": "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p",
"url": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p"
}
],
"release_date": "2026-06-16T21:26:22.537000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-30T15:00:33+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33574"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments"
}
]
}
RHSA-2026:34342
Vulnerability from csaf_redhat - Published: 2026-07-01 14:36 - Updated: 2026-08-10 14:57Summary
Red Hat Security Advisory: Cluster Observability Operator 1.5.0
Severity
Critical
Notes
Topic: The Cluster Observability Operator (COO) is a Red Hat OpenShift Container Platform Operator that you can deploy to manage observability component stacks by using custom resource descriptions (CRDs).
Details: The 1.5 release of COO.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the npm library trim where a specifically crafted input can cause a regular expression to take an abnormal amount of time to compute. All versions of package trim are vulnerable to Regular Expression Denial of Service (ReDoS) [DNP] via trim().
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Vendor Fix
fix
|
Known not affected
93 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Threats
Impact
Moderate
A flaw was found in nodejs-trim-newlines. Node.js has an issue related to regular expression denial-of-service (ReDoS) for the .end() method.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Vendor Fix
fix
|
Known not affected
93 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Threats
Impact
Moderate
A flaw was found in the NPM package `braces.` It fails to limit the number of characters it can handle, which could lead to memory exhaustion. In `lib/parse.js,` if a malicious user sends "imbalanced braces" as input, the parsing will enter a loop, causing the program to start allocating heap memory without freeing it at any moment of the loop. Eventually, the JavaScript heap limit is reached, and the program will crash.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
93 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in golang.org/x/net/html. This flaw allows an attacker to craft input to the parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This issue can cause a denial of service.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
|
Known not affected
93 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Threats
Impact
Important
A flaw was found in launch-editor, a tool that allows users to open files with line numbers in an editor from Node.js. Due to insufficient sanitization of the `file` argument in the `launchEditor` function, an attacker can execute arbitrary commands on Windows systems by supplying a filename that contains special characters. This can lead to a complete compromise of the affected system.
8.3 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
89 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `golang.org/x/oauth2/jws` package in the token parsing component. This vulnerability is made possible because of the use of `strings.Split(token, ".")` to split JWT tokens, which can lead to excessive memory consumption when processing maliciously crafted tokens with a large number of `.` characters. An attacker could exploit this functionality by sending numerous malformed tokens and can trigger memory exhaustion and a Denial of Service.
7.5 (High)
Affected products
Fixed
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
77 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in proxy host matching. This vulnerability allows improper bypassing of proxy settings via manipulating an IPv6 zone ID, causing unintended matches against the NO_PROXY environment variable.
4.4 (Medium)
Affected products
Fixed
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
73 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the HTML tokenizer component. This vulnerability allows incorrect DOM construction and potential content misplacement via unquoted attribute values ending with a (/) in tags within foreign content contexts such as <math> or <svg>.
6.5 (Medium)
Affected products
Fixed
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
73 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Workaround
|
Threats
Impact
Moderate
The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.
5.3 (Medium)
Affected products
Fixed
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Vendor Fix
fix
|
Known not affected
73 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Threats
Impact
Moderate
The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) in an exposed go application if an attacker provides specially crafted HTML content.
4.3 (Medium)
Affected products
Fixed
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
73 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in undici. A remote attacker can exploit this vulnerability by sending a specially crafted compressed frame, known as a "decompression bomb," during permessage-deflate decompression. The undici WebSocket client does not properly limit the size of decompressed data, leading to unbounded memory consumption. This can cause the Node.js process to exhaust available memory, resulting in a denial of service (DoS) where the process crashes or becomes unresponsive.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
85 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in undici. A remote attacker could exploit this vulnerability by sending a specially crafted WebSocket frame with an extremely large 64-bit length. This causes undici's ByteParser to overflow its internal calculations, leading to an invalid state and a fatal TypeError. The primary consequence is a Denial of Service (DoS), which terminates the process.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
85 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the undici WebSocket client. A remote malicious server can exploit this vulnerability by sending a WebSocket frame with an invalid `server_max_window_bits` parameter within the permessage-deflate extension. This improper validation causes the client's Node.js process to terminate, leading to a denial-of-service (DoS) condition for the client.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
85 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().
8.1 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
85 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in path-to-regexp. A remote attacker could exploit this vulnerability by crafting a malicious URL with three or more parameters in a single segment, separated by non-period characters. This causes the component to generate a bad regular expression, leading to catastrophic backtracking. The overlapping capture groups can consume excessive processing resources, resulting in a Denial of Service (DoS) for the affected application.
5.3 (Medium)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
85 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by providing a specially crafted Uniform Resource Locator (URL) containing percent-encoded path separators and dot segments. Due to incorrect processing, fast-uri would decode these elements before proper normalization, leading to distinct URLs resolving to the same internal path. This could allow an attacker to bypass security policies that rely on path-based comparisons, potentially gaining unauthorized access to resources.
7.5 (High)
Affected products
Fixed
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Vendor Fix
fix
|
Known not affected
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Threats
Impact
Important
A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI's intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls.
7.5 (High)
Affected products
Fixed
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Vendor Fix
fix
|
Known not affected
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Threats
Impact
Important
A flaw was found in undici. When using Socks5ProxyAgent, undici incorrectly reuses a single connection pool across different origins. This can lead to cross-origin request routing, where sensitive credentials and data intended for one destination are sent to another. Consequently, responses from unintended origins may be trusted, and secure HTTPS connections could be silently downgraded to unencrypted HTTP, resulting in information disclosure and data integrity issues.
7.5 (High)
Affected products
Fixed
36 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the shell-quote component. The quote() function did not properly validate object-token inputs, allowing line terminators to pass unescaped into the output. A remote attacker could exploit this vulnerability by providing specially crafted input, which a POSIX shell would interpret as a command separator. This could lead to command injection, enabling the attacker to execute arbitrary code on the system.
8.1 (High)
Affected products
Fixed
48 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Vendor Fix
fix
|
Known not affected
49 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Threats
Impact
Important
A flaw was found in undici. When undici's ProxyAgent is configured with a SOCKS5 proxy Uniform Resource Identifier (URI), it silently ignores Transport Layer Security (TLS) options, such as custom Certificate Authorities (CAs). This allows a remote attacker to perform a Man-in-the-Middle (MITM) attack, intercepting and tampering with HTTPS communications. The connection falls back to Node.js's default trust store, bypassing intended security configurations and potentially leading to information disclosure or arbitrary code execution.
7.4 (High)
Affected products
Fixed
36 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.
7.5 (High)
Affected products
Fixed
48 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
49 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in undici. A malicious WebSocket server can exploit this by streaming numerous small or empty continuation frames. This can bypass per-frame and cumulative-size validation, leading to unbounded memory growth in the client process. The primary consequence is memory exhaustion, resulting in a denial of service (DoS) for affected applications using the undici WebSocket client or WebSocketStream API.
7.5 (High)
Affected products
Fixed
48 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
49 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. A remote attacker could provide specially crafted HTML, which, when parsed by the affected component, would consume excessive CPU resources. This could lead to a Denial of Service (DoS) condition, making the system unavailable to legitimate users.
6.5 (Medium)
Affected products
Fixed
36 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.
8.1 (High)
Affected products
Fixed
36 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).
8.8 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Vendor Fix
fix
|
Known not affected
85 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Threats
Impact
Important
A denial of service flaw has been discovered in the flatted npm library. flatted's parse() function uses a recursive revive() phase to resolve circular references in deserialized JSON. When given a crafted payload with deeply nested or self-referential $ indices, the recursion depth is unbounded, causing a stack overflow that crashes the Node.js process.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
85 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in flatted, a JavaScript Object Notation (JSON) parser designed for handling circular data structures. A remote attacker can exploit this vulnerability by providing specially crafted JSON input. The parse() function in flatted fails to properly validate string values used as array index keys, allowing an attacker to manipulate internal JavaScript object prototypes. This prototype pollution can enable an attacker to execute arbitrary code or cause a denial of service, impacting the availability and integrity of affected systems.
9.8 (Critical)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Vendor Fix
fix
|
Known not affected
85 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Threats
Impact
Critical
A flaw was found in Picomatch, a JavaScript glob matcher. This Regular Expression Denial of Service (ReDoS) vulnerability allows a remote attacker to cause excessive CPU consumption and block the Node.js event loop, leading to a denial of service. This occurs when untrusted users supply crafted extglob patterns, specifically those using quantifiers like `+()` and `*()` combined with overlapping alternatives or nested extglobs, which can trigger catastrophic backtracking in the compiled regular expressions.
6.5 (Medium)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
85 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the HTTP/2 protocol implementation within the Go standard library (golang.org/x/net and net/http/internal/http2). A remote attacker can exploit this vulnerability by sending a specially crafted HTTP/2 SETTINGS frame with the SETTINGS_MAX_FRAME_SIZE parameter set to zero. This malicious frame causes the transport layer to enter an infinite loop of writing CONTINUATION frames, leading to resource exhaustion and a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
36 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the node-forge library, a JavaScript implementation of Transport Layer Security. This vulnerability, inherited from the bundled jsbn library, allows a remote attacker to cause a Denial of Service (DoS). When the BigInteger.modInverse() function is called with a zero value, it enters an infinite loop, causing the process to hang indefinitely and consume 100% of the CPU resources.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
93 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Forge (also called `node-forge`), a JavaScript implementation of Transport Layer Security. A remote attacker could exploit weaknesses in the RSASSA PKCS#1 v1.5 signature verification process. By crafting malicious signatures that include extra data within the ASN structure and do not meet padding requirements, an attacker can bypass signature validation. This allows for the creation of forged signatures that appear legitimate, potentially compromising the integrity and authenticity of communications.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
93 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Forge (also called `node-forge`), a JavaScript library used for Transport Layer Security (TLS). The library's Ed25519 signature verification process does not correctly validate cryptographic signatures, allowing forged non-canonical signatures to be accepted. A remote attacker could exploit this signature malleability to bypass authentication and authorization logic. This vulnerability can also circumvent security checks in applications that rely on the uniqueness of cryptographic signatures for functions such as deduplication or preventing replay attacks.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
93 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Forge (also known as node-forge), a JavaScript implementation of Transport Layer Security (TLS). The `pki.verifyCertificateChain()` function does not properly enforce certificate validation rules. This oversight allows an intermediate certificate that lacks specific security extensions to enable any leaf certificate to function as a Certificate Authority (CA) and sign other certificates. Consequently, node-forge could accept these unauthorized certificates as valid, potentially leading to spoofing or the issuance of illegitimate certificates.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
93 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Handlebars. An attacker can exploit this by supplying a crafted Abstract Syntax Tree (AST) object to the `Handlebars.compile()` function. This allows the injection and execution of arbitrary JavaScript code due to improper sanitization of the `value` field in `NumberLiteral` AST nodes. This vulnerability can lead to Remote Code Execution (RCE) on the server.
9.8 (Critical)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
85 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Handlebars. A remote attacker can exploit this vulnerability by manipulating the `@partial-block` special variable within the template data context. By overwriting `@partial-block` with a specially crafted Abstract Syntax Tree (AST) through a helper, a subsequent invocation of `{{> @partial-block}}` will compile and execute the malicious AST. This enables arbitrary JavaScript execution on the server, leading to potential compromise of the system.
8.1 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
85 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Handlebars.js. A remote attacker can exploit this by submitting a malformed Handlebars template that includes decorator syntax referencing an unregistered decorator. When the application attempts to compile this template without proper error handling, it triggers an unhandled `TypeError`. This error causes the Node.js process to crash, resulting in a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
85 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Handlebars.js. A remote attacker can exploit this vulnerability by providing a specially crafted object within the template context. This crafted object, when processed by a dynamic partial lookup, can bypass security checks and be interpreted as malicious code. This allows the attacker to execute arbitrary commands on the server where Handlebars.js is running.
8.1 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
85 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Handlebars. The Handlebars command-line interface (CLI) precompiler concatenates user-controlled strings, such as template file names and CLI options, directly into the generated JavaScript without proper escaping or sanitization. An attacker capable of influencing these inputs can inject arbitrary JavaScript code. This can lead to arbitrary code execution when the generated JavaScript bundle is loaded in a Node.js environment or a web browser.
8.2 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
85 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
36 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. When parsing arbitrary HTML that is subsequently rendered, an unexpected HTML tree can be generated. A remote attacker could leverage this vulnerability to execute Cross-Site Scripting (XSS) attacks in applications that attempt to sanitize input HTML before rendering, potentially leading to unauthorized actions or information disclosure.
5.4 (Medium)
Affected products
Fixed
36 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that consume excessive memory. Consequently, this leads to process termination and a denial of service (DoS) for the remote peer.
7.5 (High)
Affected products
Fixed
48 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
49 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 | — |
Workaround
|
Threats
Impact
Important
References
322 references
Acknowledgments
jub0bs
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "The Cluster Observability Operator (COO) is a Red Hat OpenShift Container Platform Operator that you can deploy to manage observability component stacks by using custom resource descriptions (CRDs).",
"title": "Topic"
},
{
"category": "general",
"text": "The 1.5 release of COO.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:34342",
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2020-7753",
"url": "https://access.redhat.com/security/cve/CVE-2020-7753"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2021-33623",
"url": "https://access.redhat.com/security/cve/CVE-2021-33623"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2024-4068",
"url": "https://access.redhat.com/security/cve/CVE-2024-4068"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2024-45338",
"url": "https://access.redhat.com/security/cve/CVE-2024-45338"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2024-52011",
"url": "https://access.redhat.com/security/cve/CVE-2024-52011"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-22868",
"url": "https://access.redhat.com/security/cve/CVE-2025-22868"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-22870",
"url": "https://access.redhat.com/security/cve/CVE-2025-22870"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-22872",
"url": "https://access.redhat.com/security/cve/CVE-2025-22872"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-47911",
"url": "https://access.redhat.com/security/cve/CVE-2025-47911"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-58190",
"url": "https://access.redhat.com/security/cve/CVE-2025-58190"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-12143",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-12151",
"url": "https://access.redhat.com/security/cve/CVE-2026-12151"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-1526",
"url": "https://access.redhat.com/security/cve/CVE-2026-1526"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-1528",
"url": "https://access.redhat.com/security/cve/CVE-2026-1528"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-2229",
"url": "https://access.redhat.com/security/cve/CVE-2026-2229"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25680",
"url": "https://access.redhat.com/security/cve/CVE-2026-25680"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25681",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29063",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32141",
"url": "https://access.redhat.com/security/cve/CVE-2026-32141"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33228",
"url": "https://access.redhat.com/security/cve/CVE-2026-33228"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33671",
"url": "https://access.redhat.com/security/cve/CVE-2026-33671"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33814",
"url": "https://access.redhat.com/security/cve/CVE-2026-33814"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33891",
"url": "https://access.redhat.com/security/cve/CVE-2026-33891"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33894",
"url": "https://access.redhat.com/security/cve/CVE-2026-33894"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33895",
"url": "https://access.redhat.com/security/cve/CVE-2026-33895"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33896",
"url": "https://access.redhat.com/security/cve/CVE-2026-33896"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33937",
"url": "https://access.redhat.com/security/cve/CVE-2026-33937"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33938",
"url": "https://access.redhat.com/security/cve/CVE-2026-33938"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33939",
"url": "https://access.redhat.com/security/cve/CVE-2026-33939"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33940",
"url": "https://access.redhat.com/security/cve/CVE-2026-33940"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33941",
"url": "https://access.redhat.com/security/cve/CVE-2026-33941"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42506",
"url": "https://access.redhat.com/security/cve/CVE-2026-42506"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4800",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4867",
"url": "https://access.redhat.com/security/cve/CVE-2026-4867"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-48779",
"url": "https://access.redhat.com/security/cve/CVE-2026-48779"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-6321",
"url": "https://access.redhat.com/security/cve/CVE-2026-6321"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-6322",
"url": "https://access.redhat.com/security/cve/CVE-2026-6322"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-6734",
"url": "https://access.redhat.com/security/cve/CVE-2026-6734"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-9277",
"url": "https://access.redhat.com/security/cve/CVE-2026-9277"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-9697",
"url": "https://access.redhat.com/security/cve/CVE-2026-9697"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification",
"url": "https://access.redhat.com/security/updates/classification"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.openshift.com/container-platform/latest/observability/cluster_observability_operator/cluster-observability-operator-release-notes.html",
"url": "https://docs.openshift.com/container-platform/latest/observability/cluster_observability_operator/cluster-observability-operator-release-notes.html"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_34342.json"
}
],
"title": "Red Hat Security Advisory: Cluster Observability Operator 1.5.0",
"tracking": {
"current_release_date": "2026-08-10T14:57:40+00:00",
"generator": {
"date": "2026-08-10T14:57:40+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.14"
}
},
"id": "RHSA-2026:34342",
"initial_release_date": "2026-07-01T14:36:53+00:00",
"revision_history": [
{
"date": "2026-07-01T14:36:53+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-08T04:36:23+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-10T14:57:40+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Cluster Observability Operator 1.5.0",
"product": {
"name": "Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
}
}
}
],
"category": "product_family",
"name": "Cluster Observability Operator"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/alertmanager-rhel9@sha256%3A09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/alertmanager-rhel9\u0026tag=1782840761"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-health-analyzer-rhel9@sha256%3A6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9\u0026tag=1782838463"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-observability-rhel9-operator@sha256%3Af5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator\u0026tag=1782855737"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-observability-operator-bundle@sha256%3A6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle\u0026tag=1782859385"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"product_identification_helper": {
"purl": "pkg:oci/dashboards-console-plugin-rhel9@sha256%3A0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9\u0026tag=1782842349"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/distributed-tracing-console-plugin-rhel9@sha256%3Aa4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9\u0026tag=1782838753"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"product_identification_helper": {
"purl": "pkg:oci/distributed-tracing-console-plugin-pf4-rhel9@sha256%3A34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9\u0026tag=1782840519"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/distributed-tracing-console-plugin-pf5-rhel9@sha256%3Af0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9\u0026tag=1782839981"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"product_identification_helper": {
"purl": "pkg:oci/distributed-tracing-console-plugin-pf6-rhel9@sha256%3A258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9\u0026tag=1782839193"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"product_identification_helper": {
"purl": "pkg:oci/korrel8r-rhel9@sha256%3A54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/korrel8r-rhel9\u0026tag=1782839157"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"product_identification_helper": {
"purl": "pkg:oci/logging-console-plugin-rhel9@sha256%3A110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9\u0026tag=1782841925"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/logging-console-plugin-pf4-rhel9@sha256%3A841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9\u0026tag=1782839279"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"product_identification_helper": {
"purl": "pkg:oci/logging-console-plugin-pf5-rhel9@sha256%3Acdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9\u0026tag=1782840539"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"product_identification_helper": {
"purl": "pkg:oci/monitoring-console-plugin-rhel9@sha256%3A1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9\u0026tag=1782838476"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"product_identification_helper": {
"purl": "pkg:oci/monitoring-console-plugin-pf5-rhel9@sha256%3A9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9\u0026tag=1782844225"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"product_identification_helper": {
"purl": "pkg:oci/monitoring-console-plugin-pf6-rhel9@sha256%3A15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9\u0026tag=1782839658"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"product_identification_helper": {
"purl": "pkg:oci/obo-prometheus-rhel9-operator@sha256%3A33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator\u0026tag=1782839407"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/obo-prometheus-operator-admission-webhook-rhel9@sha256%3A3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9\u0026tag=1782839701"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"product_identification_helper": {
"purl": "pkg:oci/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256%3A0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9\u0026tag=1782844359"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/perses-rhel9@sha256%3A4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/perses-rhel9\u0026tag=1782839109"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/perses-rhel9-operator@sha256%3Ab93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/perses-rhel9-operator\u0026tag=1782839191"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"product_identification_helper": {
"purl": "pkg:oci/prometheus-rhel9@sha256%3A631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/prometheus-rhel9\u0026tag=1782840780"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/thanos-rhel9@sha256%3A9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/thanos-rhel9\u0026tag=1782840280"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"product_identification_helper": {
"purl": "pkg:oci/troubleshooting-panel-console-plugin-rhel9@sha256%3A475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9\u0026tag=1782839494"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/troubleshooting-panel-console-plugin-pf6-rhel9@sha256%3A6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9\u0026tag=1782839996"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"product_identification_helper": {
"purl": "pkg:oci/alertmanager-rhel9@sha256%3Adde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/alertmanager-rhel9\u0026tag=1782840761"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-health-analyzer-rhel9@sha256%3A6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9\u0026tag=1782838463"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-observability-rhel9-operator@sha256%3A2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator\u0026tag=1782855737"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"product_identification_helper": {
"purl": "pkg:oci/dashboards-console-plugin-rhel9@sha256%3Af3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9\u0026tag=1782842349"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"product_identification_helper": {
"purl": "pkg:oci/distributed-tracing-console-plugin-rhel9@sha256%3Ad93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9\u0026tag=1782838753"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"product_identification_helper": {
"purl": "pkg:oci/distributed-tracing-console-plugin-pf4-rhel9@sha256%3A837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9\u0026tag=1782840519"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"product_identification_helper": {
"purl": "pkg:oci/distributed-tracing-console-plugin-pf5-rhel9@sha256%3Af1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9\u0026tag=1782839981"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"product_identification_helper": {
"purl": "pkg:oci/distributed-tracing-console-plugin-pf6-rhel9@sha256%3A9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9\u0026tag=1782839193"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"product_identification_helper": {
"purl": "pkg:oci/korrel8r-rhel9@sha256%3A9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/korrel8r-rhel9\u0026tag=1782839157"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"product_identification_helper": {
"purl": "pkg:oci/logging-console-plugin-rhel9@sha256%3Ab8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9\u0026tag=1782841925"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"product_identification_helper": {
"purl": "pkg:oci/logging-console-plugin-pf4-rhel9@sha256%3A91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9\u0026tag=1782839279"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/logging-console-plugin-pf5-rhel9@sha256%3A03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9\u0026tag=1782840539"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"product_identification_helper": {
"purl": "pkg:oci/monitoring-console-plugin-rhel9@sha256%3Aeb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9\u0026tag=1782838476"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/monitoring-console-plugin-pf5-rhel9@sha256%3A5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9\u0026tag=1782844225"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"product_identification_helper": {
"purl": "pkg:oci/monitoring-console-plugin-pf6-rhel9@sha256%3A0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9\u0026tag=1782839658"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"product_identification_helper": {
"purl": "pkg:oci/obo-prometheus-rhel9-operator@sha256%3Aaf873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator\u0026tag=1782839407"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"product_identification_helper": {
"purl": "pkg:oci/obo-prometheus-operator-admission-webhook-rhel9@sha256%3Ae8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9\u0026tag=1782839701"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"product_identification_helper": {
"purl": "pkg:oci/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256%3A5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9\u0026tag=1782844359"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"product_identification_helper": {
"purl": "pkg:oci/perses-rhel9@sha256%3A8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/perses-rhel9\u0026tag=1782839109"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"product_identification_helper": {
"purl": "pkg:oci/perses-rhel9-operator@sha256%3Adbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/perses-rhel9-operator\u0026tag=1782839191"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"product_identification_helper": {
"purl": "pkg:oci/prometheus-rhel9@sha256%3Af9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/prometheus-rhel9\u0026tag=1782840780"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/thanos-rhel9@sha256%3A60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/thanos-rhel9\u0026tag=1782840280"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"product_identification_helper": {
"purl": "pkg:oci/troubleshooting-panel-console-plugin-rhel9@sha256%3A6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9\u0026tag=1782839494"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"product_identification_helper": {
"purl": "pkg:oci/troubleshooting-panel-console-plugin-pf6-rhel9@sha256%3A8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9\u0026tag=1782839996"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/alertmanager-rhel9@sha256%3Ae2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/alertmanager-rhel9\u0026tag=1782840761"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-health-analyzer-rhel9@sha256%3A8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9\u0026tag=1782838463"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-observability-rhel9-operator@sha256%3A34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator\u0026tag=1782855737"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/dashboards-console-plugin-rhel9@sha256%3Ae9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9\u0026tag=1782842349"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/distributed-tracing-console-plugin-rhel9@sha256%3A28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9\u0026tag=1782838753"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/distributed-tracing-console-plugin-pf4-rhel9@sha256%3Ab7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9\u0026tag=1782840519"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/distributed-tracing-console-plugin-pf5-rhel9@sha256%3Aeff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9\u0026tag=1782839981"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/distributed-tracing-console-plugin-pf6-rhel9@sha256%3A0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9\u0026tag=1782839193"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/korrel8r-rhel9@sha256%3A6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/korrel8r-rhel9\u0026tag=1782839157"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/logging-console-plugin-rhel9@sha256%3Ad1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9\u0026tag=1782841925"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/logging-console-plugin-pf4-rhel9@sha256%3A2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9\u0026tag=1782839279"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/logging-console-plugin-pf5-rhel9@sha256%3Accce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9\u0026tag=1782840539"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/monitoring-console-plugin-rhel9@sha256%3Ac47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9\u0026tag=1782838476"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/monitoring-console-plugin-pf5-rhel9@sha256%3A595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9\u0026tag=1782844225"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/monitoring-console-plugin-pf6-rhel9@sha256%3A9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9\u0026tag=1782839658"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/obo-prometheus-rhel9-operator@sha256%3A0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator\u0026tag=1782839407"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/obo-prometheus-operator-admission-webhook-rhel9@sha256%3Ab5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9\u0026tag=1782839701"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256%3A4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9\u0026tag=1782844359"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/perses-rhel9@sha256%3Abf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/perses-rhel9\u0026tag=1782839109"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/perses-rhel9-operator@sha256%3Af9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/perses-rhel9-operator\u0026tag=1782839191"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/prometheus-rhel9@sha256%3A316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/prometheus-rhel9\u0026tag=1782840780"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/thanos-rhel9@sha256%3A78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/thanos-rhel9\u0026tag=1782840280"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/troubleshooting-panel-console-plugin-rhel9@sha256%3Abda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9\u0026tag=1782839494"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/troubleshooting-panel-console-plugin-pf6-rhel9@sha256%3A935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9\u0026tag=1782839996"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/alertmanager-rhel9@sha256%3A86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/alertmanager-rhel9\u0026tag=1782840761"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-health-analyzer-rhel9@sha256%3Af75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9\u0026tag=1782838463"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-observability-rhel9-operator@sha256%3A764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator\u0026tag=1782855737"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"product_identification_helper": {
"purl": "pkg:oci/dashboards-console-plugin-rhel9@sha256%3A3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9\u0026tag=1782842349"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/distributed-tracing-console-plugin-rhel9@sha256%3Ada84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9\u0026tag=1782838753"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"product_identification_helper": {
"purl": "pkg:oci/distributed-tracing-console-plugin-pf4-rhel9@sha256%3A2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9\u0026tag=1782840519"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"product_identification_helper": {
"purl": "pkg:oci/distributed-tracing-console-plugin-pf5-rhel9@sha256%3A573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9\u0026tag=1782839981"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"product_identification_helper": {
"purl": "pkg:oci/distributed-tracing-console-plugin-pf6-rhel9@sha256%3Ac48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9\u0026tag=1782839193"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/korrel8r-rhel9@sha256%3A41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/korrel8r-rhel9\u0026tag=1782839157"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"product_identification_helper": {
"purl": "pkg:oci/logging-console-plugin-rhel9@sha256%3Aed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9\u0026tag=1782841925"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"product_identification_helper": {
"purl": "pkg:oci/logging-console-plugin-pf4-rhel9@sha256%3A1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9\u0026tag=1782839279"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"product_identification_helper": {
"purl": "pkg:oci/logging-console-plugin-pf5-rhel9@sha256%3A2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9\u0026tag=1782840539"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"product_identification_helper": {
"purl": "pkg:oci/monitoring-console-plugin-rhel9@sha256%3A91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9\u0026tag=1782838476"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"product_identification_helper": {
"purl": "pkg:oci/monitoring-console-plugin-pf5-rhel9@sha256%3Acb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9\u0026tag=1782844225"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"product_identification_helper": {
"purl": "pkg:oci/monitoring-console-plugin-pf6-rhel9@sha256%3A70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9\u0026tag=1782839658"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"product_identification_helper": {
"purl": "pkg:oci/obo-prometheus-rhel9-operator@sha256%3A1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator\u0026tag=1782839407"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"product_identification_helper": {
"purl": "pkg:oci/obo-prometheus-operator-admission-webhook-rhel9@sha256%3A39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9\u0026tag=1782839701"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"product_identification_helper": {
"purl": "pkg:oci/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256%3Af396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9\u0026tag=1782844359"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"product_identification_helper": {
"purl": "pkg:oci/perses-rhel9@sha256%3A14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/perses-rhel9\u0026tag=1782839109"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"product_identification_helper": {
"purl": "pkg:oci/perses-rhel9-operator@sha256%3A7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/perses-rhel9-operator\u0026tag=1782839191"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"product_identification_helper": {
"purl": "pkg:oci/prometheus-rhel9@sha256%3Abf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/prometheus-rhel9\u0026tag=1782840780"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"product_identification_helper": {
"purl": "pkg:oci/thanos-rhel9@sha256%3A00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/thanos-rhel9\u0026tag=1782840280"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x",
"product_identification_helper": {
"purl": "pkg:oci/troubleshooting-panel-console-plugin-rhel9@sha256%3Ac69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9\u0026tag=1782839494"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"product_identification_helper": {
"purl": "pkg:oci/troubleshooting-panel-console-plugin-pf6-rhel9@sha256%3Aaa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9\u0026tag=1782839996"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2020-7753",
"cwe": {
"id": "CWE-185",
"name": "Incorrect Regular Expression"
},
"discovery_date": "2020-10-27T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1891860"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the npm library trim where a specifically crafted input can cause a regular expression to take an abnormal amount of time to compute. All versions of package trim are vulnerable to Regular Expression Denial of Service (ReDoS) [DNP] via trim().",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nodejs-trim: Regular Expression Denial of Service (ReDoS) in trim function",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-7753"
},
{
"category": "external",
"summary": "RHBZ#1891860",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1891860"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-7753",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-7753"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-7753",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-7753"
},
{
"category": "external",
"summary": "https://github.com/component/trim/blob/master/index.js%23L6",
"url": "https://github.com/component/trim/blob/master/index.js%23L6"
},
{
"category": "external",
"summary": "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1022132",
"url": "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1022132"
},
{
"category": "external",
"summary": "https://snyk.io/vuln/SNYK-JS-TRIM-1017038",
"url": "https://snyk.io/vuln/SNYK-JS-TRIM-1017038"
}
],
"release_date": "2020-10-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "nodejs-trim: Regular Expression Denial of Service (ReDoS) in trim function"
},
{
"cve": "CVE-2021-33623",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2021-05-28T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1966615"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in nodejs-trim-newlines. Node.js has an issue related to regular expression denial-of-service (ReDoS) for the .end() method.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nodejs-trim-newlines: ReDoS in .end() method",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "OpenShift Container Platform (OCP) grafana-container does package a vulnerable verison of nodejs trim-newlines. However due to the instance being read only and behind OpenShift OAuth, the impact by this vulnerability is Low. Red Hat Advanced Cluster Management for Kubernetes (ACM) containers affected by this flaw are only accessible to authenticated users, thus the impact of this vulnerability is Low. \nRed Hat Virtualization (RHV) does package a vulnerable version of nodejs-trim-newlines. However, no untrusted content is being parsed therefore the impact of this vulnerability is Low.\n\nThe hosted services are shipped with the vulnerable packages, however the vulnerable methods were not identified in use at this time.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2021-33623"
},
{
"category": "external",
"summary": "RHBZ#1966615",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1966615"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2021-33623",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-33623"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-33623",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-33623"
}
],
"release_date": "2021-05-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "nodejs-trim-newlines: ReDoS in .end() method"
},
{
"cve": "CVE-2024-4068",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2024-05-14T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2280600"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the NPM package `braces.` It fails to limit the number of characters it can handle, which could lead to memory exhaustion. In `lib/parse.js,` if a malicious user sends \"imbalanced braces\" as input, the parsing will enter a loop, causing the program to start allocating heap memory without freeing it at any moment of the loop. Eventually, the JavaScript heap limit is reached, and the program will crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "braces: fails to limit the number of characters it can handle",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-4068"
},
{
"category": "external",
"summary": "RHBZ#2280600",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2280600"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-4068",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-4068"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-4068",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-4068"
},
{
"category": "external",
"summary": "https://devhub.checkmarx.com/cve-details/CVE-2024-4068/",
"url": "https://devhub.checkmarx.com/cve-details/CVE-2024-4068/"
},
{
"category": "external",
"summary": "https://github.com/micromatch/braces/blob/98414f9f1fabe021736e26836d8306d5de747e0d/lib/parse.js#L308",
"url": "https://github.com/micromatch/braces/blob/98414f9f1fabe021736e26836d8306d5de747e0d/lib/parse.js#L308"
},
{
"category": "external",
"summary": "https://github.com/micromatch/braces/issues/35",
"url": "https://github.com/micromatch/braces/issues/35"
}
],
"release_date": "2024-03-04T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "braces: fails to limit the number of characters it can handle"
},
{
"cve": "CVE-2024-45338",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2024-12-18T21:00:59.938173+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2333122"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. This flaw allows an attacker to craft input to the parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This issue can cause a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as an Important severity because an attacker can craft malicious input that causes the parsing functions to process data non-linearly, resulting in significant delays which leads to a denial of service by exhausting system resources.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-45338"
},
{
"category": "external",
"summary": "RHBZ#2333122",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2333122"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-45338",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45338"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-45338",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45338"
},
{
"category": "external",
"summary": "https://go.dev/cl/637536",
"url": "https://go.dev/cl/637536"
},
{
"category": "external",
"summary": "https://go.dev/issue/70906",
"url": "https://go.dev/issue/70906"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/wSCRmFnNmPA/m/Lvcd0mRMAwAJ",
"url": "https://groups.google.com/g/golang-announce/c/wSCRmFnNmPA/m/Lvcd0mRMAwAJ"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2024-3333",
"url": "https://pkg.go.dev/vuln/GO-2024-3333"
}
],
"release_date": "2024-12-18T20:38:22.660000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html"
},
{
"cve": "CVE-2024-52011",
"cwe": {
"id": "CWE-88",
"name": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)"
},
"discovery_date": "2026-06-01T19:04:20.806168+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2483853"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in launch-editor, a tool that allows users to open files with line numbers in an editor from Node.js. Due to insufficient sanitization of the `file` argument in the `launchEditor` function, an attacker can execute arbitrary commands on Windows systems by supplying a filename that contains special characters. This can lead to a complete compromise of the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "launch-editor: vite: launch-editor: Arbitrary command execution via insufficient file argument sanitization",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-52011"
},
{
"category": "external",
"summary": "RHBZ#2483853",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483853"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-52011",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-52011"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-52011",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-52011"
},
{
"category": "external",
"summary": "https://github.com/vitejs/launch-editor/commit/971291e8a6a91226e1616c5c0ec85423d2d50a5e",
"url": "https://github.com/vitejs/launch-editor/commit/971291e8a6a91226e1616c5c0ec85423d2d50a5e"
},
{
"category": "external",
"summary": "https://github.com/vitejs/launch-editor/security/advisories/GHSA-c27g-q93r-2cwf",
"url": "https://github.com/vitejs/launch-editor/security/advisories/GHSA-c27g-q93r-2cwf"
}
],
"release_date": "2026-06-01T17:17:43.792000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "launch-editor: vite: launch-editor: Arbitrary command execution via insufficient file argument sanitization"
},
{
"acknowledgments": [
{
"names": [
"jub0bs"
]
}
],
"cve": "CVE-2025-22868",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2025-02-26T04:00:44.350024+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2348366"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `golang.org/x/oauth2/jws` package in the token parsing component. This vulnerability is made possible because of the use of `strings.Split(token, \".\")` to split JWT tokens, which can lead to excessive memory consumption when processing maliciously crafted tokens with a large number of `.` characters. An attacker could exploit this functionality by sending numerous malformed tokens and can trigger memory exhaustion and a Denial of Service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2/jws",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-22868"
},
{
"category": "external",
"summary": "RHBZ#2348366",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2348366"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-22868",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22868"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-22868",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-22868"
},
{
"category": "external",
"summary": "https://go.dev/cl/652155",
"url": "https://go.dev/cl/652155"
},
{
"category": "external",
"summary": "https://go.dev/issue/71490",
"url": "https://go.dev/issue/71490"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-3488",
"url": "https://pkg.go.dev/vuln/GO-2025-3488"
}
],
"release_date": "2025-02-26T03:07:49.012000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, it is recommended to pre-validate any payloads passed to `go-jose` to check that they do not contain an excessive amount of `.` characters.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2/jws"
},
{
"cve": "CVE-2025-22870",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2025-03-12T19:00:59.178193+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2351766"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in proxy host matching. This vulnerability allows improper bypassing of proxy settings via manipulating an IPv6 zone ID, causing unintended matches against the NO_PROXY environment variable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/proxy: golang.org/x/net/http/httpproxy: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-22870"
},
{
"category": "external",
"summary": "RHBZ#2351766",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2351766"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-22870",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22870"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-22870",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-22870"
},
{
"category": "external",
"summary": "https://go.dev/cl/654697",
"url": "https://go.dev/cl/654697"
},
{
"category": "external",
"summary": "https://go.dev/issue/71984",
"url": "https://go.dev/issue/71984"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-3503",
"url": "https://pkg.go.dev/vuln/GO-2025-3503"
}
],
"release_date": "2025-03-12T18:27:59.376000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/net/proxy: golang.org/x/net/http/httpproxy: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net"
},
{
"cve": "CVE-2025-22872",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2025-04-16T18:03:27.904242+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2360404"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the HTML tokenizer component. This vulnerability allows incorrect DOM construction and potential content misplacement via unquoted attribute values ending with a (/) in tags within foreign content contexts such as \u003cmath\u003e or \u003csvg\u003e.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-22872"
},
{
"category": "external",
"summary": "RHBZ#2360404",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2360404"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-22872",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22872"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-22872",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-22872"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-vvgc-356p-c3xw",
"url": "https://github.com/advisories/GHSA-vvgc-356p-c3xw"
},
{
"category": "external",
"summary": "https://go.dev/cl/662715",
"url": "https://go.dev/cl/662715"
},
{
"category": "external",
"summary": "https://go.dev/issue/73070",
"url": "https://go.dev/issue/73070"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/ezSKR9vqbqA",
"url": "https://groups.google.com/g/golang-announce/c/ezSKR9vqbqA"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-3595",
"url": "https://pkg.go.dev/vuln/GO-2025-3595"
}
],
"release_date": "2025-04-16T17:13:02.550000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/net/html: Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net"
},
{
"cve": "CVE-2025-47911",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2026-02-05T18:01:23.423406+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437109"
}
],
"notes": [
{
"category": "description",
"text": "The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: Quadratic parsing complexity in golang.org/x/net/html",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Moderate: The `golang.org/x/net/html` package, used across various Red Hat products, is vulnerable to a denial of service due to quadratic parsing complexity in its `html.Parse` function. An attacker providing specially crafted HTML content could exploit this flaw, leading to resource exhaustion and service unavailability in applications that process untrusted HTML input.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-47911"
},
{
"category": "external",
"summary": "RHBZ#2437109",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437109"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-47911",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-47911"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-47911",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47911"
},
{
"category": "external",
"summary": "https://github.com/golang/vulndb/issues/4440",
"url": "https://github.com/golang/vulndb/issues/4440"
},
{
"category": "external",
"summary": "https://go.dev/cl/709876",
"url": "https://go.dev/cl/709876"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/jnQcOYpiR2c",
"url": "https://groups.google.com/g/golang-announce/c/jnQcOYpiR2c"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4440",
"url": "https://pkg.go.dev/vuln/GO-2026-4440"
}
],
"release_date": "2026-02-05T17:48:44.562000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/net/html: Quadratic parsing complexity in golang.org/x/net/html"
},
{
"cve": "CVE-2025-58190",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-02-05T18:01:26.511908+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437110"
}
],
"notes": [
{
"category": "description",
"text": "The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) in an exposed go application if an attacker provides specially crafted HTML content.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: Infinite parsing loop in golang.org/x/net",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-58190"
},
{
"category": "external",
"summary": "RHBZ#2437110",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437110"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-58190",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-58190"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-58190",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-58190"
},
{
"category": "external",
"summary": "https://github.com/golang/vulndb/issues/4441",
"url": "https://github.com/golang/vulndb/issues/4441"
},
{
"category": "external",
"summary": "https://go.dev/cl/709875",
"url": "https://go.dev/cl/709875"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/jnQcOYpiR2c",
"url": "https://groups.google.com/g/golang-announce/c/jnQcOYpiR2c"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4441",
"url": "https://pkg.go.dev/vuln/GO-2026-4441"
}
],
"release_date": "2026-02-05T17:48:44.693000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/net/html: Infinite parsing loop in golang.org/x/net"
},
{
"cve": "CVE-2026-1526",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-03-12T21:01:25.538271+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2447142"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in undici. A remote attacker can exploit this vulnerability by sending a specially crafted compressed frame, known as a \"decompression bomb,\" during permessage-deflate decompression. The undici WebSocket client does not properly limit the size of decompressed data, leading to unbounded memory consumption. This can cause the Node.js process to exhaust available memory, resulting in a denial of service (DoS) where the process crashes or becomes unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undici: undici: Denial of Service via unbounded memory consumption during WebSocket permessage-deflate decompression",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-1526"
},
{
"category": "external",
"summary": "RHBZ#2447142",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447142"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-1526",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-1526"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-1526",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-1526"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://datatracker.ietf.org/doc/html/rfc7692",
"url": "https://datatracker.ietf.org/doc/html/rfc7692"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/security/advisories/GHSA-vrm6-8vpv-qv8q",
"url": "https://github.com/nodejs/undici/security/advisories/GHSA-vrm6-8vpv-qv8q"
},
{
"category": "external",
"summary": "https://hackerone.com/reports/3481206",
"url": "https://hackerone.com/reports/3481206"
}
],
"release_date": "2026-03-12T20:08:05.950000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "undici: undici: Denial of Service via unbounded memory consumption during WebSocket permessage-deflate decompression"
},
{
"cve": "CVE-2026-1528",
"cwe": {
"id": "CWE-248",
"name": "Uncaught Exception"
},
"discovery_date": "2026-03-12T21:01:36.954017+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2447145"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in undici. A remote attacker could exploit this vulnerability by sending a specially crafted WebSocket frame with an extremely large 64-bit length. This causes undici\u0027s ByteParser to overflow its internal calculations, leading to an invalid state and a fatal TypeError. The primary consequence is a Denial of Service (DoS), which terminates the process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undici: undici: Denial of Service via crafted WebSocket frame with large length",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-1528"
},
{
"category": "external",
"summary": "RHBZ#2447145",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447145"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-1528",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-1528"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-1528",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-1528"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/security/advisories/GHSA-f269-vfmq-vjvj",
"url": "https://github.com/nodejs/undici/security/advisories/GHSA-f269-vfmq-vjvj"
},
{
"category": "external",
"summary": "https://hackerone.com/reports/3537648",
"url": "https://hackerone.com/reports/3537648"
}
],
"release_date": "2026-03-12T20:21:57.775000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "undici: undici: Denial of Service via crafted WebSocket frame with large length"
},
{
"cve": "CVE-2026-2229",
"cwe": {
"id": "CWE-248",
"name": "Uncaught Exception"
},
"discovery_date": "2026-03-12T21:01:29.187989+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2447143"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the undici WebSocket client. A remote malicious server can exploit this vulnerability by sending a WebSocket frame with an invalid `server_max_window_bits` parameter within the permessage-deflate extension. This improper validation causes the client\u0027s Node.js process to terminate, leading to a denial-of-service (DoS) condition for the client.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undici: Undici: Denial of Service via invalid WebSocket permessage-deflate extension parameter",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-2229"
},
{
"category": "external",
"summary": "RHBZ#2447143",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447143"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-2229",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2229"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-2229",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-2229"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://datatracker.ietf.org/doc/html/rfc7692",
"url": "https://datatracker.ietf.org/doc/html/rfc7692"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/security/advisories/GHSA-v9p9-hfj2-hcw8",
"url": "https://github.com/nodejs/undici/security/advisories/GHSA-v9p9-hfj2-hcw8"
},
{
"category": "external",
"summary": "https://hackerone.com/reports/3487486",
"url": "https://hackerone.com/reports/3487486"
},
{
"category": "external",
"summary": "https://nodejs.org/api/zlib.html#class-zlibinflateraw",
"url": "https://nodejs.org/api/zlib.html#class-zlibinflateraw"
}
],
"release_date": "2026-03-12T20:27:05.600000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "undici: Undici: Denial of Service via invalid WebSocket permessage-deflate extension parameter"
},
{
"cve": "CVE-2026-4800",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-03-31T20:01:21.918257+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2453496"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lodash: lodash: Arbitrary code execution via untrusted input in template imports",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In the context of Red Hat Enterprise Linux, the grafana and grafana-pcp packages execute the affected JavaScript entirely client-side within the user\u0027s browser. Consequently, the attack surface is strictly restricted to the local browser environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "RHBZ#2453496",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453496"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4800",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm",
"url": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm"
},
{
"category": "external",
"summary": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c",
"url": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c"
}
],
"release_date": "2026-03-31T19:25:55.987000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lodash: lodash: Arbitrary code execution via untrusted input in template imports"
},
{
"cve": "CVE-2026-4867",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-03-26T17:01:58.222137+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2451783"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in path-to-regexp. A remote attacker could exploit this vulnerability by crafting a malicious URL with three or more parameters in a single segment, separated by non-period characters. This causes the component to generate a bad regular expression, leading to catastrophic backtracking. The overlapping capture groups can consume excessive processing resources, resulting in a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "path-to-regexp: path-to-regexp: Denial of Service via catastrophic backtracking from malformed URL parameters",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4867"
},
{
"category": "external",
"summary": "RHBZ#2451783",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451783"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4867",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4867"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4867",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4867"
},
{
"category": "external",
"summary": "https://blakeembrey.com/posts/2024-09-web-redos",
"url": "https://blakeembrey.com/posts/2024-09-web-redos"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-9wv6-86v2-598j",
"url": "https://github.com/advisories/GHSA-9wv6-86v2-598j"
}
],
"release_date": "2026-03-26T16:16:25.501000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications using `path-to-regexp` can implement custom regular expressions for parameters beyond the first in a single URL segment. For example, a route like `/:a-:b-:c` can be rewritten as `/:a-:b([^-/]+)-:c([^-/]+)`. Alternatively, limiting the maximum length of incoming URLs can also reduce the risk of exploitation. These changes require application-level configuration and may necessitate a service restart to take effect.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "path-to-regexp: path-to-regexp: Denial of Service via catastrophic backtracking from malformed URL parameters"
},
{
"cve": "CVE-2026-6321",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-05-04T20:01:14.938426+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466582"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by providing a specially crafted Uniform Resource Locator (URL) containing percent-encoded path separators and dot segments. Due to incorrect processing, fast-uri would decode these elements before proper normalization, leading to distinct URLs resolving to the same internal path. This could allow an attacker to bypass security policies that rely on path-based comparisons, potentially gaining unauthorized access to resources.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: Path traversal vulnerability allows bypass of security policies",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6321"
},
{
"category": "external",
"summary": "RHBZ#2466582",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466582"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6321",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6321"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6321",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6321"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-q3j6-qgpj-74h6",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-q3j6-qgpj-74h6"
}
],
"release_date": "2026-05-04T19:31:57.253000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: Path traversal vulnerability allows bypass of security policies"
},
{
"cve": "CVE-2026-6322",
"cwe": {
"id": "CWE-140",
"name": "Improper Neutralization of Delimiters"
},
"discovery_date": "2026-05-05T11:01:00.332189+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI\u0027s intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the `fast-uri` library allows an attacker to bypass security controls in Red Hat products that process Uniform Resource Identifiers (URIs). By crafting a malicious URI with percent-encoded authority delimiters, an attacker can cause the library to incorrectly interpret the URI\u0027s authority, potentially redirecting applications to an unintended domain. This could lead to a bypass of host allowlist checks, redirect validation, or outbound request routing.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6322"
},
{
"category": "external",
"summary": "RHBZ#2466684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6322",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6322"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6322",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6322"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc"
}
],
"release_date": "2026-05-05T10:29:16.378000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling"
},
{
"cve": "CVE-2026-6734",
"cwe": {
"id": "CWE-940",
"name": "Improper Verification of Source of a Communication Channel"
},
"discovery_date": "2026-06-17T19:04:00.272340+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2490024"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in undici. When using Socks5ProxyAgent, undici incorrectly reuses a single connection pool across different origins. This can lead to cross-origin request routing, where sensitive credentials and data intended for one destination are sent to another. Consequently, responses from unintended origins may be trusted, and secure HTTPS connections could be silently downgraded to unencrypted HTTP, resulting in information disclosure and data integrity issues.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undici: undici: Information disclosure and data integrity issues due to incorrect Socks5ProxyAgent connection routing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is rated as an Important security flaw. The `undici` library, when configured with `Socks5ProxyAgent` to handle requests for multiple origins, incorrectly reuses connection pools. This can lead to sensitive data and credentials being misrouted to unintended destinations, potentially downgrading HTTPS connections to HTTP and compromising data integrity and confidentiality. Red Hat products utilizing `undici` with `Socks5ProxyAgent` in multi-origin scenarios are affected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6734"
},
{
"category": "external",
"summary": "RHBZ#2490024",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490024"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6734",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6734"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6734",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6734"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/security/advisories/GHSA-hm92-r4w5-c3mj",
"url": "https://github.com/nodejs/undici/security/advisories/GHSA-hm92-r4w5-c3mj"
}
],
"release_date": "2026-06-17T16:36:55.439000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"category": "workaround",
"details": "The single most impactful mitigation is applying network egress controls to restrict which external destinations affected applications can reach. Because the vulnerability causes requests to be misrouted to wrong origins, limiting the set of reachable origins directly reduces the attack surface. These controls collectively limit the blast radius of the connection pool misrouting \u2014 the attacker must compromise one of the explicitly allowed destinations rather than any arbitrary origin \u2014 but they do not fix the underlying logic bug.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "undici: undici: Information disclosure and data integrity issues due to incorrect Socks5ProxyAgent connection routing"
},
{
"cve": "CVE-2026-9277",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2026-05-22T14:01:14.427751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480741"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the shell-quote component. The quote() function did not properly validate object-token inputs, allowing line terminators to pass unescaped into the output. A remote attacker could exploit this vulnerability by providing specially crafted input, which a POSIX shell would interpret as a command separator. This could lead to command injection, enabling the attacker to execute arbitrary code on the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "shell-quote: shell-quote: Arbitrary code execution via command injection due to unescaped line terminators",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-9277"
},
{
"category": "external",
"summary": "RHBZ#2480741",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480741"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-9277",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9277"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-9277",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9277"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote",
"url": "https://github.com/ljharb/shell-quote"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote/commit/1518179",
"url": "https://github.com/ljharb/shell-quote/commit/1518179"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote/security/advisories/GHSA-w7jw-789q-3m8p",
"url": "https://github.com/ljharb/shell-quote/security/advisories/GHSA-w7jw-789q-3m8p"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/shell-quote",
"url": "https://www.npmjs.com/package/shell-quote"
}
],
"release_date": "2026-05-22T13:22:38.873000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "shell-quote: shell-quote: Arbitrary code execution via command injection due to unescaped line terminators"
},
{
"cve": "CVE-2026-9697",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-06-17T19:03:30.813843+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2490018"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in undici. When undici\u0027s ProxyAgent is configured with a SOCKS5 proxy Uniform Resource Identifier (URI), it silently ignores Transport Layer Security (TLS) options, such as custom Certificate Authorities (CAs). This allows a remote attacker to perform a Man-in-the-Middle (MITM) attack, intercepting and tampering with HTTPS communications. The connection falls back to Node.js\u0027s default trust store, bypassing intended security configurations and potentially leading to information disclosure or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undici: undici: Man-in-the-Middle attack via ignored TLS options with SOCKS5 proxy",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important vulnerability. Applications using `undici`\u0027s `ProxyAgent` with a SOCKS5 proxy URI will silently ignore user-configured TLS options, including custom Certificate Authorities. This bypasses intended security controls for HTTPS communication, enabling a remote attacker to perform Man-in-the-Middle attacks, potentially leading to information disclosure or arbitrary code execution in affected Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-9697"
},
{
"category": "external",
"summary": "RHBZ#2490018",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490018"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-9697",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9697"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-9697",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9697"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/security/advisories/GHSA-vmh5-mc38-953g",
"url": "https://github.com/nodejs/undici/security/advisories/GHSA-vmh5-mc38-953g"
}
],
"release_date": "2026-06-17T16:46:42.706000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "undici: undici: Man-in-the-Middle attack via ignored TLS options with SOCKS5 proxy"
},
{
"cve": "CVE-2026-12143",
"cwe": {
"id": "CWE-93",
"name": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
},
"discovery_date": "2026-06-12T19:00:57.360953+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488480"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (\") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "form-data: form-data: Form field override via CRLF injection",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important impact flaw in the form-data library: a remote attacker can inject arbitrary headers or additional multipart parts via CRLF injection in field names or filenames, potentially overriding sensitive form fields and affecting data integrity.\n\nFor RHOAI and RHEL AI, severity is Moderate because affected versions appear only as a transitive npm dependency in RHOAI (dashboard, mod-arch plugins, MLflow UI) and RHEL AI 3.4 bootc images, and those products use fixed field names for uploads rather than passing untrusted user input as multipart field names or filenames. The documented exploit path is therefore not reachable in default deployments. Practical impact is limited to non-default or custom integrations that forward multipart requests using attacker-controlled field names.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "RHBZ#2488480",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488480"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12143",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12143"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://cwe.mitre.org/data/definitions/93.html",
"url": "https://cwe.mitre.org/data/definitions/93.html"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435",
"url": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229",
"url": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045",
"url": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx",
"url": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx"
},
{
"category": "external",
"summary": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data",
"url": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/form-data",
"url": "https://www.npmjs.com/package/form-data"
}
],
"release_date": "2026-06-12T18:01:30.362000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"category": "workaround",
"details": "Applications using the `form-data` library should implement strict input validation and sanitization for all field names and filenames derived from untrusted sources. This prevents the injection of control characters (CR, LF, \") that could lead to header injection or form field overrides. Deployments that exclusively use fixed or trusted field names are not impacted.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "form-data: form-data: Form field override via CRLF injection"
},
{
"cve": "CVE-2026-12151",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-17T17:01:45.297604+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2489980"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in undici. A malicious WebSocket server can exploit this by streaming numerous small or empty continuation frames. This can bypass per-frame and cumulative-size validation, leading to unbounded memory growth in the client process. The primary consequence is memory exhaustion, resulting in a denial of service (DoS) for affected applications using the undici WebSocket client or WebSocketStream API.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in the `undici` WebSocket client allows a remote attacker to cause unbounded memory growth. By sending numerous small or empty WebSocket frames, an unauthenticated attacker can exhaust system memory, leading to a denial of service in Red Hat products that use the affected client.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12151"
},
{
"category": "external",
"summary": "RHBZ#2489980",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489980"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12151"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/security/advisories/GHSA-vxpw-j846-p89q",
"url": "https://github.com/nodejs/undici/security/advisories/GHSA-vxpw-j846-p89q"
}
],
"release_date": "2026-06-17T16:05:38.785000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames"
},
{
"cve": "CVE-2026-25680",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-05-22T16:01:05.431197+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480760"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. A remote attacker could provide specially crafted HTML, which, when parsed by the affected component, would consume excessive CPU resources. This could lead to a Denial of Service (DoS) condition, making the system unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang.org/x/net/html: Denial of Service due to excessive HTML parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this issue as Moderate with RH CVSS 6.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H). A flaw was found in golang.org/x/net/html where parsing crafted HTML can consume excessive CPU time, leading to denial of service. Exploitation requires user interaction (a victim application parsing attacker-controlled HTML). Most Red Hat products that bundle golang.org/x/net do not use the html parser to process untrusted HTML in their supported execution paths.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25680"
},
{
"category": "external",
"summary": "RHBZ#2480760",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480760"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25680",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25680"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25680",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25680"
},
{
"category": "external",
"summary": "https://go.dev/cl/781702",
"url": "https://go.dev/cl/781702"
},
{
"category": "external",
"summary": "https://go.dev/issue/79573",
"url": "https://go.dev/issue/79573"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5028",
"url": "https://pkg.go.dev/vuln/GO-2026-5028"
}
],
"release_date": "2026-05-22T15:01:21.805000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"category": "workaround",
"details": "Update affected Go applications to use golang.org/x/net version 0.55.0 or later. As a workaround, do not use golang.org/x/net/html to parse untrusted HTML content, or enforce timeouts on HTML parsing operations. Applications that do not parse arbitrary HTML are not affected.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/net/html: golang.org/x/net/html: Denial of Service due to excessive HTML parsing"
},
{
"cve": "CVE-2026-25681",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:08.177603+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480761"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/net/html` could enable remote attackers to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution. The flaw allows specially crafted HTML to bypass input sanitization during parsing and rendering. Red Hat products are affected if they process untrusted HTML content using the vulnerable component without additional output encoding or robust content security policies.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "RHBZ#2480761",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25681",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://go.dev/cl/781703",
"url": "https://go.dev/cl/781703"
},
{
"category": "external",
"summary": "https://go.dev/issue/79574",
"url": "https://go.dev/issue/79574"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5029",
"url": "https://pkg.go.dev/vuln/GO-2026-5029"
}
],
"release_date": "2026-05-22T15:01:21.975000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"category": "workaround",
"details": "To mitigate this flaw, applications processing untrusted HTML input must implement strict input sanitization and ensure all output is properly encoded before rendering. Deploying a comprehensive Content Security Policy (CSP) can restrict script execution, further reducing the attack surface. Administrators should review application configurations to ensure adequate protection against XSS.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting"
},
{
"cve": "CVE-2026-29063",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-03-06T19:00:57.982727+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445291"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation of this vulnerability requires that an attacker is able to provide arbitrary data to clients of this library in a way that calls the affected functions with data the attacker controls. In most deployments, the ability to provide data in this fashion requires that an attacker has some degree of privileges to access the affected applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "RHBZ#2445291",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445291"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29063",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29063"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw",
"url": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw"
}
],
"release_date": "2026-03-06T18:25:22.438000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution"
},
{
"cve": "CVE-2026-32141",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-03-12T19:01:30.987208+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2447083"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service flaw has been discovered in the flatted npm library. flatted\u0027s parse() function uses a recursive revive() phase to resolve circular references in deserialized JSON. When given a crafted payload with deeply nested or self-referential $ indices, the recursion depth is unbounded, causing a stack overflow that crashes the Node.js process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flatted: flatted: Unbounded recursion DoS in parse() revive phase",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32141"
},
{
"category": "external",
"summary": "RHBZ#2447083",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447083"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32141",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32141"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32141",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32141"
},
{
"category": "external",
"summary": "https://github.com/WebReflection/flatted/commit/7eb65d857e1a40de11c47461cdbc8541449f0606",
"url": "https://github.com/WebReflection/flatted/commit/7eb65d857e1a40de11c47461cdbc8541449f0606"
},
{
"category": "external",
"summary": "https://github.com/WebReflection/flatted/pull/88",
"url": "https://github.com/WebReflection/flatted/pull/88"
},
{
"category": "external",
"summary": "https://github.com/WebReflection/flatted/security/advisories/GHSA-25h7-pfq9-p65f",
"url": "https://github.com/WebReflection/flatted/security/advisories/GHSA-25h7-pfq9-p65f"
}
],
"release_date": "2026-03-12T18:08:09.634000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "flatted: flatted: Unbounded recursion DoS in parse() revive phase"
},
{
"cve": "CVE-2026-33228",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-03-21T00:01:43.424803+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449872"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in flatted, a JavaScript Object Notation (JSON) parser designed for handling circular data structures. A remote attacker can exploit this vulnerability by providing specially crafted JSON input. The parse() function in flatted fails to properly validate string values used as array index keys, allowing an attacker to manipulate internal JavaScript object prototypes. This prototype pollution can enable an attacker to execute arbitrary code or cause a denial of service, impacting the availability and integrity of affected systems.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flatted: Flatted: Prototype pollution vulnerability allows arbitrary code execution via crafted JSON.",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A Critical vulnerability was discovered in \u0027flatted\u0027, a JavaScript JSON parser. It could enable a remote, unauthenticated attacker to execute arbitrary code or cause a denial of service. Exploitation involves prototype pollution by providing a specially crafted JSON input. Red Hat products that process un-trusted JSON data and utilize the \u0027flatted\u0027 library are at risk if they do not properly sanitize input.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33228"
},
{
"category": "external",
"summary": "RHBZ#2449872",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449872"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33228",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33228"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33228",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33228"
},
{
"category": "external",
"summary": "https://github.com/WebReflection/flatted/commit/885ddcc33cf9657caf38c57c7be45ae1c5272802",
"url": "https://github.com/WebReflection/flatted/commit/885ddcc33cf9657caf38c57c7be45ae1c5272802"
},
{
"category": "external",
"summary": "https://github.com/WebReflection/flatted/releases/tag/v3.4.2",
"url": "https://github.com/WebReflection/flatted/releases/tag/v3.4.2"
},
{
"category": "external",
"summary": "https://github.com/WebReflection/flatted/security/advisories/GHSA-rf6f-7fwh-wjgh",
"url": "https://github.com/WebReflection/flatted/security/advisories/GHSA-rf6f-7fwh-wjgh"
}
],
"release_date": "2026-03-20T23:06:48.485000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flatted: Flatted: Prototype pollution vulnerability allows arbitrary code execution via crafted JSON."
},
{
"cve": "CVE-2026-33671",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-03-26T22:01:52.640474+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2451986"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Picomatch, a JavaScript glob matcher. This Regular Expression Denial of Service (ReDoS) vulnerability allows a remote attacker to cause excessive CPU consumption and block the Node.js event loop, leading to a denial of service. This occurs when untrusted users supply crafted extglob patterns, specifically those using quantifiers like `+()` and `*()` combined with overlapping alternatives or nested extglobs, which can trigger catastrophic backtracking in the compiled regular expressions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "picomatch: Picomatch: Regular Expression Denial of Service via crafted extglob patterns",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33671"
},
{
"category": "external",
"summary": "RHBZ#2451986",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451986"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33671",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33671"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33671",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33671"
},
{
"category": "external",
"summary": "https://github.com/micromatch/picomatch/commit/5eceecd27543b8e056b9307d69e105ea03618a7d",
"url": "https://github.com/micromatch/picomatch/commit/5eceecd27543b8e056b9307d69e105ea03618a7d"
},
{
"category": "external",
"summary": "https://github.com/micromatch/picomatch/security/advisories/GHSA-c2c7-rcm5-vvqj",
"url": "https://github.com/micromatch/picomatch/security/advisories/GHSA-c2c7-rcm5-vvqj"
}
],
"release_date": "2026-03-26T21:20:48.191000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications using Picomatch should avoid passing untrusted glob patterns for compilation or matching. Implementations can disable extglob support for untrusted patterns by setting `noextglob: true` in Picomatch configurations. Alternatively, reject or sanitize patterns containing nested extglobs or specific extglob quantifiers like `+()` and `*()`. Enforcing strict allowlists for accepted pattern syntax can also reduce exposure. If the application is a service, consider running the matching process in an isolated worker or separate process with time and resource limits, and apply application-level request throttling and input validation for any endpoint that accepts glob patterns. No service restart or reload is typically required for these application-level configuration changes, but verify the specific application\u0027s behavior.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "picomatch: Picomatch: Regular Expression Denial of Service via crafted extglob patterns"
},
{
"cve": "CVE-2026-33814",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:11.324941+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467815"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the HTTP/2 protocol implementation within the Go standard library (golang.org/x/net and net/http/internal/http2). A remote attacker can exploit this vulnerability by sending a specially crafted HTTP/2 SETTINGS frame with the SETTINGS_MAX_FRAME_SIZE parameter set to zero. This malicious frame causes the transport layer to enter an infinite loop of writing CONTINUATION frames, leading to resource exhaustion and a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in the Go HTTP/2 protocol implementation allows a remote, unauthenticated attacker to exhaust system resources. By sending a specially crafted HTTP/2 SETTINGS frame with a zero-value SETTINGS_MAX_FRAME_SIZE, the vulnerable Go library enters an infinite loop, impacting the availability of services utilizing HTTP/2.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33814"
},
{
"category": "external",
"summary": "RHBZ#2467815",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467815"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33814",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33814"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33814",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33814"
},
{
"category": "external",
"summary": "https://go.dev/cl/761581",
"url": "https://go.dev/cl/761581"
},
{
"category": "external",
"summary": "https://go.dev/cl/761640",
"url": "https://go.dev/cl/761640"
},
{
"category": "external",
"summary": "https://go.dev/issue/78476",
"url": "https://go.dev/issue/78476"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4918",
"url": "https://pkg.go.dev/vuln/GO-2026-4918"
}
],
"release_date": "2026-05-07T19:41:17.631000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame"
},
{
"cve": "CVE-2026-33891",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-03-27T21:01:34.410210+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452450"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the node-forge library, a JavaScript implementation of Transport Layer Security. This vulnerability, inherited from the bundled jsbn library, allows a remote attacker to cause a Denial of Service (DoS). When the BigInteger.modInverse() function is called with a zero value, it enters an infinite loop, causing the process to hang indefinitely and consume 100% of the CPU resources.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "node-forge: node-forge: Denial of Service via infinite loop in BigInteger.modInverse()",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33891"
},
{
"category": "external",
"summary": "RHBZ#2452450",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452450"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33891",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33891"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33891",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33891"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/commit/9bb8d67b99d17e4ebb5fd7596cd699e11f25d023",
"url": "https://github.com/digitalbazaar/forge/commit/9bb8d67b99d17e4ebb5fd7596cd699e11f25d023"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-5m6q-g25r-mvwx",
"url": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-5m6q-g25r-mvwx"
}
],
"release_date": "2026-03-27T20:43:37.725000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "node-forge: node-forge: Denial of Service via infinite loop in BigInteger.modInverse()"
},
{
"cve": "CVE-2026-33894",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-03-27T21:02:52.462999+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452464"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Forge (also called `node-forge`), a JavaScript implementation of Transport Layer Security. A remote attacker could exploit weaknesses in the RSASSA PKCS#1 v1.5 signature verification process. By crafting malicious signatures that include extra data within the ASN structure and do not meet padding requirements, an attacker can bypass signature validation. This allows for the creation of forged signatures that appear legitimate, potentially compromising the integrity and authenticity of communications.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "node-forge: Forge: Signature Forgery via Weak RSASSA PKCS#1 v1.5 Verification",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33894"
},
{
"category": "external",
"summary": "RHBZ#2452464",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452464"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33894",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33894"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33894",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33894"
},
{
"category": "external",
"summary": "https://datatracker.ietf.org/doc/html/rfc2313#section-8",
"url": "https://datatracker.ietf.org/doc/html/rfc2313#section-8"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-ppp5-5v6c-4jwp",
"url": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-ppp5-5v6c-4jwp"
},
{
"category": "external",
"summary": "https://mailarchive.ietf.org/arch/msg/openpgp/5rnE9ZRN1AokBVj3VqblGlP63QE",
"url": "https://mailarchive.ietf.org/arch/msg/openpgp/5rnE9ZRN1AokBVj3VqblGlP63QE"
},
{
"category": "external",
"summary": "https://www.rfc-editor.org/rfc/rfc8017.html",
"url": "https://www.rfc-editor.org/rfc/rfc8017.html"
}
],
"release_date": "2026-03-27T20:45:49.583000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "node-forge: Forge: Signature Forgery via Weak RSASSA PKCS#1 v1.5 Verification"
},
{
"cve": "CVE-2026-33895",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-03-27T21:02:18.484291+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452457"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Forge (also called `node-forge`), a JavaScript library used for Transport Layer Security (TLS). The library\u0027s Ed25519 signature verification process does not correctly validate cryptographic signatures, allowing forged non-canonical signatures to be accepted. A remote attacker could exploit this signature malleability to bypass authentication and authorization logic. This vulnerability can also circumvent security checks in applications that rely on the uniqueness of cryptographic signatures for functions such as deduplication or preventing replay attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "node-forge: Forge: Authentication bypass via forged Ed25519 cryptographic signatures",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33895"
},
{
"category": "external",
"summary": "RHBZ#2452457",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452457"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33895",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33895"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33895",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33895"
},
{
"category": "external",
"summary": "https://datatracker.ietf.org/doc/html/rfc8032#section-8.4",
"url": "https://datatracker.ietf.org/doc/html/rfc8032#section-8.4"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/commit/bdecf11571c9f1a487cc0fe72fe78ff6dfa96b85",
"url": "https://github.com/digitalbazaar/forge/commit/bdecf11571c9f1a487cc0fe72fe78ff6dfa96b85"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-q67f-28xg-22rw",
"url": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-q67f-28xg-22rw"
}
],
"release_date": "2026-03-27T20:47:54.492000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "node-forge: Forge: Authentication bypass via forged Ed25519 cryptographic signatures"
},
{
"cve": "CVE-2026-33896",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-03-27T21:02:22.762233+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452458"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Forge (also known as node-forge), a JavaScript implementation of Transport Layer Security (TLS). The `pki.verifyCertificateChain()` function does not properly enforce certificate validation rules. This oversight allows an intermediate certificate that lacks specific security extensions to enable any leaf certificate to function as a Certificate Authority (CA) and sign other certificates. Consequently, node-forge could accept these unauthorized certificates as valid, potentially leading to spoofing or the issuance of illegitimate certificates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "node-forge: Forge (node-forge): Certificate validation bypass allows unauthorized certificate issuance",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33896"
},
{
"category": "external",
"summary": "RHBZ#2452458",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452458"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33896",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33896"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33896",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33896"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/commit/2e492832fb25227e6b647cbe1ac981c123171e90",
"url": "https://github.com/digitalbazaar/forge/commit/2e492832fb25227e6b647cbe1ac981c123171e90"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-2328-f5f3-gj25",
"url": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-2328-f5f3-gj25"
}
],
"release_date": "2026-03-27T20:50:03.418000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "node-forge: Forge (node-forge): Certificate validation bypass allows unauthorized certificate issuance"
},
{
"cve": "CVE-2026-33937",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-03-27T22:02:50.619819+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452523"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Handlebars. An attacker can exploit this by supplying a crafted Abstract Syntax Tree (AST) object to the `Handlebars.compile()` function. This allows the injection and execution of arbitrary JavaScript code due to improper sanitization of the `value` field in `NumberLiteral` AST nodes. This vulnerability can lead to Remote Code Execution (RCE) on the server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "handlebars.js: Handlebars: Remote Code Execution via crafted Abstract Syntax Tree object in compile()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important vulnerability in Handlebars that allows for Remote Code Execution. The flaw occurs when the `Handlebars.compile()` function processes a specially crafted Abstract Syntax Tree (AST) object, leading to the injection and execution of arbitrary JavaScript code. Red Hat products utilizing Handlebars are affected if they process untrusted input through the `compile()` function.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33937"
},
{
"category": "external",
"summary": "RHBZ#2452523",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452523"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33937",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33937"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33937",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33937"
},
{
"category": "external",
"summary": "https://github.com/handlebars-lang/handlebars.js/commit/68d8df5a88e0a26fe9e6084c5c6aaebe67b07da2",
"url": "https://github.com/handlebars-lang/handlebars.js/commit/68d8df5a88e0a26fe9e6084c5c6aaebe67b07da2"
},
{
"category": "external",
"summary": "https://github.com/handlebars-lang/handlebars.js/releases/tag/v4.7.9",
"url": "https://github.com/handlebars-lang/handlebars.js/releases/tag/v4.7.9"
},
{
"category": "external",
"summary": "https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-2w6w-674q-4c4q",
"url": "https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-2w6w-674q-4c4q"
}
],
"release_date": "2026-03-27T21:03:46.748000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"category": "workaround",
"details": "To mitigate this issue, ensure that any input provided to the `Handlebars.compile()` function is strictly validated to be a string type, preventing the injection of crafted Abstract Syntax Tree (AST) objects. Additionally, for deployments where templates are pre-compiled at build time, consider utilizing the Handlebars runtime-only build (`handlebars/runtime`). This build variant does not include the `compile()` function, thereby eliminating the attack vector. If the application is a service, a restart may be required for the changes to take effect.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "handlebars.js: Handlebars: Remote Code Execution via crafted Abstract Syntax Tree object in compile()"
},
{
"cve": "CVE-2026-33938",
"cwe": {
"id": "CWE-917",
"name": "Improper Neutralization of Special Elements used in an Expression Language Statement (\u0027Expression Language Injection\u0027)"
},
"discovery_date": "2026-03-27T22:02:58.504001+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452525"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Handlebars. A remote attacker can exploit this vulnerability by manipulating the `@partial-block` special variable within the template data context. By overwriting `@partial-block` with a specially crafted Abstract Syntax Tree (AST) through a helper, a subsequent invocation of `{{\u003e @partial-block}}` will compile and execute the malicious AST. This enables arbitrary JavaScript execution on the server, leading to potential compromise of the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "handlebars: Handlebars: Arbitrary code execution via @partial-block overwrite",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in Handlebars allows arbitrary code execution when processing untrusted input. This occurs if an attacker can manipulate the `@partial-block` special variable through a helper, leading to the execution of a crafted Abstract Syntax Tree. Red Hat products are affected if they use Handlebars versions 4.0.0 through 4.7.8 in server-side applications where untrusted input can influence template data or context objects. Deployments utilizing the Handlebars runtime-only build are not vulnerable.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33938"
},
{
"category": "external",
"summary": "RHBZ#2452525",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452525"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33938",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33938"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33938",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33938"
},
{
"category": "external",
"summary": "https://github.com/handlebars-lang/handlebars.js/commit/68d8df5a88e0a26fe9e6084c5c6aaebe67b07da2",
"url": "https://github.com/handlebars-lang/handlebars.js/commit/68d8df5a88e0a26fe9e6084c5c6aaebe67b07da2"
},
{
"category": "external",
"summary": "https://github.com/handlebars-lang/handlebars.js/releases/tag/v4.7.9",
"url": "https://github.com/handlebars-lang/handlebars.js/releases/tag/v4.7.9"
},
{
"category": "external",
"summary": "https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-3mfm-83xf-c92r",
"url": "https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-3mfm-83xf-c92r"
}
],
"release_date": "2026-03-27T21:05:42.485000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"category": "workaround",
"details": "Applications using Handlebars should implement the runtime-only build (`require(\u0027handlebars/runtime\u0027)`) to prevent exploitation, as this build lacks the vulnerable `compile()` method. Additionally, review all registered helpers to ensure they do not write arbitrary values to context objects, and avoid using third-party helpers in contexts exposed to untrusted input.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "handlebars: Handlebars: Arbitrary code execution via @partial-block overwrite"
},
{
"cve": "CVE-2026-33939",
"cwe": {
"id": "CWE-248",
"name": "Uncaught Exception"
},
"discovery_date": "2026-03-27T22:01:36.296267+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452508"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Handlebars.js. A remote attacker can exploit this by submitting a malformed Handlebars template that includes decorator syntax referencing an unregistered decorator. When the application attempts to compile this template without proper error handling, it triggers an unhandled `TypeError`. This error causes the Node.js process to crash, resulting in a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "handlebars.js: Handlebars.js: Denial of Service via malformed decorator syntax in template compilation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in Handlebars.js affecting applications that compile user-supplied templates without proper error handling. A remote attacker can submit a malformed template containing unregistered decorator syntax, leading to an unhandled `TypeError` and crashing the Node.js process. Red Hat products are vulnerable if they use Handlebars.js in a configuration that allows untrusted input to be compiled at runtime without implementing `try/catch` blocks or input validation.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33939"
},
{
"category": "external",
"summary": "RHBZ#2452508",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452508"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33939",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33939"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33939",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33939"
},
{
"category": "external",
"summary": "https://github.com/handlebars-lang/handlebars.js/commit/68d8df5a88e0a26fe9e6084c5c6aaebe67b07da2",
"url": "https://github.com/handlebars-lang/handlebars.js/commit/68d8df5a88e0a26fe9e6084c5c6aaebe67b07da2"
},
{
"category": "external",
"summary": "https://github.com/handlebars-lang/handlebars.js/releases/tag/v4.7.9",
"url": "https://github.com/handlebars-lang/handlebars.js/releases/tag/v4.7.9"
},
{
"category": "external",
"summary": "https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-9cx6-37pm-9jff",
"url": "https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-9cx6-37pm-9jff"
}
],
"release_date": "2026-03-27T21:08:24.664000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications utilizing Handlebars.js should implement robust error handling during template compilation and rendering. Specifically, wrap template compilation and rendering calls in `try/catch` blocks to gracefully handle `TypeError` exceptions. Alternatively, validate user-supplied template input to reject decorator syntax (`{{*...}}`) if decorators are not actively used by the application. Employing a pre-compilation workflow, where templates are compiled at build time and only pre-compiled templates are served, can also prevent runtime exploitation. If the application is a service, a restart may be required for changes to take effect.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "handlebars.js: Handlebars.js: Denial of Service via malformed decorator syntax in template compilation"
},
{
"cve": "CVE-2026-33940",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-03-27T22:02:42.813017+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452521"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Handlebars.js. A remote attacker can exploit this vulnerability by providing a specially crafted object within the template context. This crafted object, when processed by a dynamic partial lookup, can bypass security checks and be interpreted as malicious code. This allows the attacker to execute arbitrary commands on the server where Handlebars.js is running.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "handlebars.js: Handlebars.js: Arbitrary code execution via crafted template context",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important arbitrary code execution vulnerability in Handlebars.js. The flaw can be exploited when an application uses Handlebars.js with dynamic partial lookups and processes user-controlled data within the template context. Red Hat products bundling Handlebars.js are affected if they meet these specific conditions for exploitation.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33940"
},
{
"category": "external",
"summary": "RHBZ#2452521",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452521"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33940",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33940"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33940",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33940"
},
{
"category": "external",
"summary": "https://github.com/handlebars-lang/handlebars.js/commit/68d8df5a88e0a26fe9e6084c5c6aaebe67b07da2",
"url": "https://github.com/handlebars-lang/handlebars.js/commit/68d8df5a88e0a26fe9e6084c5c6aaebe67b07da2"
},
{
"category": "external",
"summary": "https://github.com/handlebars-lang/handlebars.js/releases/tag/v4.7.9",
"url": "https://github.com/handlebars-lang/handlebars.js/releases/tag/v4.7.9"
},
{
"category": "external",
"summary": "https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-xhpv-hc6g-r9c6",
"url": "https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-xhpv-hc6g-r9c6"
}
],
"release_date": "2026-03-27T21:11:10.719000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"category": "workaround",
"details": "To mitigate this issue, use the runtime-only build of Handlebars.js, which prevents the fallback compilation path from being reached. Alternatively, sanitize all context data before rendering to ensure no non-primitive objects are passed to dynamic partials. Avoid dynamic partial lookups (`{{\u003e (lookup ...)}}`) when context data is user-controlled. Implementing these mitigations may require application-level changes.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "handlebars.js: Handlebars.js: Arbitrary code execution via crafted template context"
},
{
"cve": "CVE-2026-33941",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-03-27T22:02:54.583022+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452524"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Handlebars. The Handlebars command-line interface (CLI) precompiler concatenates user-controlled strings, such as template file names and CLI options, directly into the generated JavaScript without proper escaping or sanitization. An attacker capable of influencing these inputs can inject arbitrary JavaScript code. This can lead to arbitrary code execution when the generated JavaScript bundle is loaded in a Node.js environment or a web browser.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "handlebars.js: Handlebars: Arbitrary code execution via CLI precompiler input sanitization flaw",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: This flaw in Handlebars allows arbitrary code execution when the CLI precompiler processes untrusted inputs. An attacker who can influence template filenames or command-line arguments can inject malicious JavaScript, which executes when the generated bundle is loaded. Red Hat products utilizing the Handlebars CLI precompiler in environments where untrusted inputs are processed may be affected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33941"
},
{
"category": "external",
"summary": "RHBZ#2452524",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452524"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33941",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33941"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33941",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33941"
},
{
"category": "external",
"summary": "https://github.com/handlebars-lang/handlebars.js/commit/68d8df5a88e0a26fe9e6084c5c6aaebe67b07da2",
"url": "https://github.com/handlebars-lang/handlebars.js/commit/68d8df5a88e0a26fe9e6084c5c6aaebe67b07da2"
},
{
"category": "external",
"summary": "https://github.com/handlebars-lang/handlebars.js/releases/tag/v4.7.9",
"url": "https://github.com/handlebars-lang/handlebars.js/releases/tag/v4.7.9"
},
{
"category": "external",
"summary": "https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-xjpj-3mr7-gcpf",
"url": "https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-xjpj-3mr7-gcpf"
}
],
"release_date": "2026-03-27T21:13:15.437000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"category": "workaround",
"details": "To mitigate this issue, ensure all inputs to the Handlebars CLI precompiler are thoroughly validated, rejecting characters with JavaScript string-escaping significance (e.g., \\\" , \\\u0027 , ;). For automated build pipelines, configure a fixed and trusted namespace string via a configuration file rather than passing it through command-line arguments. Additionally, consider running the precompiler within a sandboxed environment, such as a container with restricted write access, to limit the potential impact of successful exploitation.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "handlebars.js: Handlebars: Arbitrary code execution via CLI precompiler input sanitization flaw"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-42506",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:02.675281+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480759"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. When parsing arbitrary HTML that is subsequently rendered, an unexpected HTML tree can be generated. A remote attacker could leverage this vulnerability to execute Cross-Site Scripting (XSS) attacks in applications that attempt to sanitize input HTML before rendering, potentially leading to unauthorized actions or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang.org/x/net/html: Cross-Site Scripting (XSS) via arbitrary HTML parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate flaw in `golang.org/x/net/html` can lead to Cross-Site Scripting (XSS) in applications that process and render untrusted HTML, even when input sanitization is implemented. The vulnerability arises from an unexpected HTML tree structure generated during parsing, potentially allowing a remote attacker to execute arbitrary script code in the user\u0027s browser, leading to information disclosure or unauthorized actions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42506"
},
{
"category": "external",
"summary": "RHBZ#2480759",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480759"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42506",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42506"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42506",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42506"
},
{
"category": "external",
"summary": "https://go.dev/cl/781700",
"url": "https://go.dev/cl/781700"
},
{
"category": "external",
"summary": "https://go.dev/issue/79571",
"url": "https://go.dev/issue/79571"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5025",
"url": "https://pkg.go.dev/vuln/GO-2026-5025"
}
],
"release_date": "2026-05-22T15:01:21.056000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"category": "workaround",
"details": "Update affected Go applications to use golang.org/x/net version 0.55.0 or later. As a workaround, do not use golang.org/x/net/html to parse and re-render untrusted HTML content. Applications that do not parse arbitrary HTML are not affected.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/net/html: golang.org/x/net/html: Cross-Site Scripting (XSS) via arbitrary HTML parsing"
},
{
"cve": "CVE-2026-48779",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-16T22:01:24.571224+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2489661"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that consume excessive memory. Consequently, this leads to process termination and a denial of service (DoS) for the remote peer.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `ws` WebSocket library. A remote attacker can exploit this flaw by sending a high volume of small, fragmented data, leading to excessive memory consumption and subsequent process termination. This can result in service disruption for Red Hat products that utilize `ws` for WebSocket communication.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48779"
},
{
"category": "external",
"summary": "RHBZ#2489661",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489661"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48779",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48779"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48779",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48779"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7",
"url": "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53",
"url": "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94",
"url": "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8",
"url": "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p",
"url": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p"
}
],
"release_date": "2026-06-16T21:26:22.537000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-01T14:36:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:34342"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:09b51e95318e4d2e9def285dad6ae8f8688a7b23fe7f80e465748002ffd7d84d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:86a5f4af2ca39be157aeb8ed19b0490e7626c643f64cf023e51fba79f1ec465d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:dde7d5a96cc71ff36a520a0718629a2787f743dabd55e0f11fb450c3d18bd490_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:e2684500d9e5164d9a2f5a8accf70f848ae11195de5ddef7d4e9dfa65cc79cb0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6eb7997104e5c20e2aeeadfe6028c94bf9a9fff37e0e8dce43779f2171ff3f51_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:6f0412c1c98dc1e062da46853088ae28bee83cf767c320e2c59a9d938c9cb0cf_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:8242946d7b196b879980955ab0bf0586722b17f6ee9ad1d2ac3ef34e1cb05534_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:f75a578c714223ec9e6aad31b53522f313fc22cc6a8028c447bd60a5046bd2ff_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:6578f6e0bf83cf924d724dd110abca715f6fd656477c1bf033cf9707650a0279_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:2e6c7b4aaeda812c292c428188bd3046fdef84dedfa39006bcc7ab525f3330af_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:34a057b1cb67a1de2dbf18cbb1abbb006a3636894d727e400689339ccdf90651_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:764dc2c081add10807008c2467337574e3f6f25d7df6bfe4363df02948cb6d56_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f5a392c6fb3e138dcf4d7cbc9ef17be3fbd1c41793cc7127567fa2d862a9734e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:0ee1e15691afd9afb73a0e22065eb14b754890c489be082ec5eb2c970bfb29ac_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:3b05276701190318cb96f1a940b35004fe69b838b3452aae1191a006e57b9cdc_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e9270444965f2c39ff75323266114ced56fe70c14d9003d5c8b80b70abf4cf0c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:f3e2613586e616efb8d3ffc5a8200fe2be037c83d2e46423970d55b3f845f1c9_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2458650c46b90645dc9c0f271598baca1cf7aed76a63be523805eb654ddaab54_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:34199b2ae39fa33693ce3238e7deeb0cbc9b085653e2a7fb3f481a1e39335266_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:837687753bd65fdc8f0815bb6d89cfbfe17332f74eebd11dba8d7cf7dc51b9e1_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:b7534e4963d4d86a4f0f08632b5ecc81f6007bd4488f979bdcb0447228e0cb43_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:573e6cefdacb285de4645b9f7bca37a36ea514d8d6febb3859d60d998a30f6b7_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:eff791b250e3685d378aaf60356fea32de1ea1789497578b68636f0cb623bb4b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f0e31451ef147785006a3836e065ef052aa5fc213645482a88b5c8f22b7579c1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:f1873fa1a11acb3698b2fdee4d3e76ea0d86bf42ad03d81fc6dad80d47a0bcfc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:0b22c50437d7d84f23314479085867643fed1ebcbfc380a7790c4cc607ff6d50_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:258678fae42e66186adec5518e7ec1cea75f3d8d39a8f8ec07fd741938de6bc2_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:9227f20c6a4f81d5e8e8ea938bb978f742470f2ada7fbdaa218ef6dfa755f8f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:c48e09ca60267fc0189b87414bf5454461846d57adc957683524e392f1fb8d18_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:28f0347a3e5c42704e70c5d7669f3b4d0543a09c9160191ad000b4c723d793ad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:a4a0e71ff06855e9314255ae6113d57bd2a32d14b96e04e1cb2dff0c653a28f9_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:d93ff1850ec815db9749ba13130f3428269396106c53fc84fe717a23e5c4eeb7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:da84dff6b97286fc442f4d44a65a3226d370de792e705f2c95c01530a879516d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:41c623f7f6d23e4fad05abeda83745c12f3da35fae78f367461f8b2eec711e6a_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:54f2e30eca91df0221394b2f86cfed384e573c42099dc1efe16ffd8515e5f826_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:6785a20d6cd0ba779455b13ebd13d1cd0f080fcfaaab013f95c4976dc0588a8b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:9815b5833ce58c918fcf3e1de643a0cb729720c3286888bcd76d4925bd390847_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:1a883d0526f205beab9dfc51c5ac32b6a494dd950465b319076bf3a72e05e798_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:2ef62503cd347fba4ae4e9fe659a39fd7ceeb6be9b29ac8c1a1071f378ad7fbc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:841c0c2af089daa79d66d73da42e9b7f1880db3ee27a1160e8e2f230f125c9f4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:91568609093559b57722d4125b472a815fabb79888a56ac5e444d34a90c5f944_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:03182e8c0d9a28dd8dab831b3740bb588fd8d03f6783d24c492e53e52df5613d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:2d882541f78495cb6ab25932d03947e038d5e477d878210e506dffcd787d201b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ccce0a754cefa59c426bea1b1c8c345487a1cd35d147f50d8c2c881401b9ea7c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:cdd84d0f5e4fbe28071182219185e2dc5a1f478c48a14eb2a34ef9dc8d75dc96_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:110c5c431fdf763c96bba57afe759e82f6c0bd255bad79bbf9fa5e3551e19f00_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:b8ec0cb408820dd42e56fa5ef083f0f8180638dc883857bea294c281e06ede08_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:d1ec1feb75ea3f0de37099f602427fec5a0295da031fd0ff4774cb53515862af_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:ed1ea1ccab647fb51e2f1c717cd161e325a6bf2b8abde53036a6d27219865077_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:595554f398ac60a30907c974b8f3b296d4b985c032a0e7b7cb4803236dc1cbb4_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:5d0efae1c7f63a52b8de49809444179964fa28ecda7488f7afdf82b1ce8e627f_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:9c05597e0d947f18bd3e859f5df60faf6ccdb25ae7ef0e18ab3df3eb1742c720_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:cb9511103b0c0682b6248c9c60f81097ed5a5dc3bcb77ceee20b1ec9e412730f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:0260ad9ca47531e44588acc9f4fd70aefcffa0954b8ce8cab3ab5f7624598020_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:15e167b5f27c481c4909bae464a8e31e568cad73477eac7847eecfc7a76ef386_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:70adda1fe4c0835060c7378f3d9c969b0e34e4e43262d9c1298990e7c32bce42_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:9b8ebc2f88ada2085ca87417407c689c1419b0f504f2173999ecda4eb4931cfd_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1dc3332d59152fc0a929539ffe4d121b9bc303636926f0ed17255bc881b8abfb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:91f8f4baa1d6ae76e16ef7220a790d5c4cb3b146e7f31cac53d18c82d40cec0b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:c47696862b842aa53c7fd5831c4c217467a31fd3f813a6f0f5c34e2b52fd786b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:eb22ccbdcfe215d624e194400674a734ac7a0b0edc4a417739095a3e0247f6fb_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:39109fa4f2af7b3ab1de9babbb232b3089e5023e99b674914f79604ba19928d4_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:3f34f3d1da02b8663ecff8bd34761715378126c9ac67576c8c50c94e5ead2c1b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b5adff760a57563166335934a5188117d54fcf46b5c1c8326d456d9ccff4e599_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:e8f327b837a2359a5a1ecef2c7b89064c99bcef5d5e5a7b0413c86362a963233_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:0a35b121ed92e360676a1a9900166ef9faa035e1efe0228a6a6fd6b4b7b370af_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:4f214a2064154bc7f922b665787c8f13519b677eea704aa8000ddb045865a6c3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:5bd7963940868f7bfd9ce2062d857238d16a0297802cda5a1d5e22bf7c1df3ab_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:f396b1fb0cefbe0d2ad03b1977b39aefe47c681b04b3491f8d7ce28b785241df_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:0e1ee52aa4fe3e549ca82fb28519d598ec5c3b258721a0817957fd2da25838cb_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:1c2ce94bc1cf89ae8c94778e5ddc108501ec8ddb02c46e76f8bba83f4b7c1749_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:33aae90d54f3d4683748d102f0592c9bdfc612a5408426e416cb2e8796708a08_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:af873a2b4133324ecab21761c2ade8ba53f1cd421853f410d5aca725908163c6_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:7b331d3901418fec4db96acbe1b2866ad5c37382450d945fe6927840bebaa636_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:b93e37c843f93dcb2b7fb39ca9ee9d55bab662bf864e924cdbfc82d346ff87b4_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:dbac43ae0993a55d4a448b0831fdb708abbcd0328582c738c4b0fc3763574ead_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:f9490cada2e8cfe72c3a039c97a74ace9dc563df303d926c2035ff694c5abfb8_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:14c55ef1f29ede1892471b5c5961ccfa84eb47b8d93afdffb9cc0e5062f7abc8_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:4b2b77f1f9ee209588f973c22901f65cbc532e3ba90bd1b7728bd1aef0963de8_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8fd0e2f58615893a801951f58b8e227bf240236178c19d3cba03f9a93ae1560b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:bf66a6276709a95d41be3b0fe0ec8a3767b264c09736f5b863c6764d2224b3e3_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:316f4fcaffa1616dbd99e04c77d3444e1dc7ef94209d7daa593cd232f30ad165_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:631eaf2a91cd777a22efee467f973b54dc3dc97ea35bdcbfdf370011aac404db_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:bf663d1bc45d4823676addd19704983eb99fdb80feb052c135209bc5a1065e3b_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:f9278ac679869558ce8a53d99640761214bfbf5f69681fa5159438f92023d6d7_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:00c060d0a64cd6fefa0138e263a6382d12530f4f9655abdcefc098f8e1afd0d2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:60ee1ebf0b39c6c5fb337a3b942148f26b8cf4337acff21f095756c902506a0e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:78a00ca8af6935aeb916cfae4712735c5a4bd22b86601bbd229618b8ea5cd008_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:9983ec744a28b2abe72670652a94249c9d9d3624cc39062ad1cbff0116337f0c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6f053e36d5ef57ba6d04f036a55800097264d9a5cac5dd96198b7afafa8cb93f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:8c22f14eb3db715badfbe34e86fee590ac4435095db4f359d555360abde376cc_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:935e17334aec23c168cd36ca6dd83ee5710ed44caa38247b759d1778298e2bad_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:aa84b143c1e0e4ca0186c75bf1e46b4cfdbdd7cdfaee4acdcb6bffe697b6aa0f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:475b2e517944517554d54998e20304a01095a0cb0438b45d0d0e87b208044003_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:6efe5ec5691a1fbbce753ba17ddaddf0fc29dd76b3c7cd27c2243f32d043436b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:bda2a8a401d3ceed7dd74809da989bfb0089373492ba1085136145de880c99e1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c69d290471d7b5a3c44d9a3d01b3234ee8b29c4edfba7364edc01a2bc83f7871_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments"
}
]
}
RHSA-2026:36754
Vulnerability from csaf_redhat - Published: 2026-07-08 13:07 - Updated: 2026-08-10 14:57Summary
Red Hat Security Advisory: Red Hat Developer Hub 1.10.2 release.
Severity
Important
Notes
Topic: Red Hat Developer Hub 1.10.2 has been released.
Details: Red Hat Developer Hub (RHDH) is Red Hat's enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters (AKS, EKS, GKE). The core features of RHDH include a single pane of glass, a centralized software catalog, self-service via golden path templates, and Tech Docs. RHDH is extensible by plugins.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI's intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64 | — |
Vendor Fix
fix
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64 | — | ||
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64 | — | ||
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64 | — | ||
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64 | — |
Threats
Impact
Important
A flaw was found in undici. When using Socks5ProxyAgent, undici incorrectly reuses a single connection pool across different origins. This can lead to cross-origin request routing, where sensitive credentials and data intended for one destination are sent to another. Consequently, responses from unintended origins may be trusted, and secure HTTPS connections could be silently downgraded to unencrypted HTTP, resulting in information disclosure and data integrity issues.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the shell-quote component. The quote() function did not properly validate object-token inputs, allowing line terminators to pass unescaped into the output. A remote attacker could exploit this vulnerability by providing specially crafted input, which a POSIX shell would interpret as a command separator. This could lead to command injection, enabling the attacker to execute arbitrary code on the system.
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64 | — |
Vendor Fix
fix
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64 | — | ||
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64 | — | ||
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64 | — | ||
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64 | — |
Threats
Impact
Important
A flaw was found in json-2-csv. An attacker can bypass the `preventCsvInjection` option to inject malicious formulas into CSV (Comma Separated Values) files. When these manipulated CSV files are opened in spreadsheet applications, the injected formulas can execute, potentially leading to arbitrary code execution or information disclosure.
6.1 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in undici. When undici's ProxyAgent is configured with a SOCKS5 proxy Uniform Resource Identifier (URI), it silently ignores Transport Layer Security (TLS) options, such as custom Certificate Authorities (CAs). This allows a remote attacker to perform a Man-in-the-Middle (MITM) attack, intercepting and tampering with HTTPS communications. The connection falls back to Node.js's default trust store, bypassing intended security configurations and potentially leading to information disclosure or arbitrary code execution.
7.4 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in undici. A malicious WebSocket server can exploit this by streaming numerous small or empty continuation frames. This can bypass per-frame and cumulative-size validation, leading to unbounded memory growth in the client process. The primary consequence is memory exhaustion, resulting in a denial of service (DoS) for affected applications using the undici WebSocket client or WebSocketStream API.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in vm2, an open-source virtual machine (VM) sandbox for Node.js. This vulnerability allows an attacker to escape the sandbox environment by exploiting the `inspect` function. Successful exploitation can lead to arbitrary code execution on the host system, compromising the integrity and confidentiality of the system.
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64 | — |
Vendor Fix
fix
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64 | — | ||
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64 | — | ||
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64 | — | ||
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64 | — |
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in ip-address, a JavaScript library for parsing and manipulating IPv4 and IPv6 addresses. This vulnerability allows a remote attacker to perform cross-site scripting (XSS) by providing untrusted input to the Address6 constructor. When an application renders the output of Address6.group(), Address6.link(), or the AddressError.parseMessage as HTML without proper escaping, the attacker-controlled content can be executed in the user's browser.
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.
8.6 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. This vulnerability, a Prototype Pollution "Gadget" attack, allows an attacker to escalate any existing Object.prototype pollution in an application's dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.
8.7 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.
7.0 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in ws, an open source WebSocket client and server for Node.js. The `websocket.close()` implementation is vulnerable to uninitialized memory disclosure when a `TypedArray` is passed as the reason argument. This can lead to the disclosure of sensitive information from uninitialized memory.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64 | — |
Vendor Fix
fix
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64 | — | ||
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64 | — | ||
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64 | — | ||
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64 | — |
Threats
Impact
Important
A flaw was found in vm2, an open-source virtual machine (VM) sandbox for Node.js. A remote attacker can exploit this vulnerability by combining specific Buffer function calls and Node.js's ERR_INVALID_ARG_TYPE error. This allows the attacker to obtain the host's TypeError constructor, leading to an escape from the sandbox. Consequently, this enables attackers to run arbitrary code on the host system.
4.1 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in vm2, an open-source virtual machine (VM) sandbox for Node.js. An attacker within the sandbox could exploit incomplete symbol interception and missing security checks to gain control over the host system. This could allow the attacker to execute arbitrary code outside the sandbox environment, leading to a complete compromise of the host.
8.7 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in vm2, an open-source virtual machine (VM) sandbox for Node.js. A remote attacker could bypass a security check designed to prevent the combination of nested environments and disabled module loading. This bypass occurs because a strict equality check for the `require` option can be circumvented by simply omitting the option, leading to an unintended configuration. Successful exploitation of this vulnerability could allow an attacker to escape the sandbox and achieve arbitrary code execution on the host system.
4.1 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64 | — |
Workaround
|
Threats
Impact
Low
A flaw was found in vm2, a Node.js sandbox. This vulnerability allows sandboxed code to bypass network restrictions by utilizing internal HTTP built-ins, such as _http_client and _http_server. An attacker can exploit this to make outbound HTTP requests or open listening HTTP sockets, even when public network modules are explicitly denied. This could lead to unauthorized information disclosure or further compromise of the system.
8.6 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in vm2, an open-source virtual machine (VM) sandbox for Node.js. This vulnerability allows sandboxed code to bypass intended security restrictions by exploiting missing entries in the denylist for dangerous Node.js built-in functions, specifically `process` and `inspector/promises`. A remote attacker can leverage this to execute arbitrary code in the host process, leading to a complete compromise of the system.
4.1 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64 | — |
Workaround
|
Threats
Impact
Low
A flaw was found in vm2, an open-source virtual machine (VM) sandbox for Node.js. Prior to version 3.11.4, NodeVM, a component of vm2, improperly exposed certain process-wide observability builtins, such as diagnostics_channel, async_hooks, and perf_hooks. These builtins, which are designed for monitoring and debugging, were not adequately blocked by the dangerous builtin denylist. This oversight allowed sandboxed code to observe sensitive host application data, leading to information disclosure across the vm2 security boundary.
8.6 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in vm2, an open-source virtual machine (VM) sandbox for Node.js. This vulnerability allows an attacker to escape the sandbox environment by writing malicious code. Successful exploitation can lead to arbitrary code execution on the host system, compromising the integrity and confidentiality of the system.
6.6 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in vm2, an open-source virtual machine (VM) sandbox for Node.js. This sandbox escape vulnerability allows an attacker to execute arbitrary code in the host process. This occurs when untrusted code is executed with asynchronous (async) support on runtimes that expose WebAssembly JavaScript Promise Integration (JSPI). Specifically, a JSPI-backed Promise can bypass expected Promise-species hardening, exposing a host-originated rejection object to attacker-controlled logic and breaking the sandbox boundary.
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that consume excessive memory. Consequently, this leads to process termination and a denial of service (DoS) for the remote peer.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64 | — |
Workaround
|
Threats
Impact
Important
References
227 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Developer Hub 1.10.2 has been released.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Developer Hub (RHDH) is Red Hat\u0027s enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters (AKS, EKS, GKE). The core features of RHDH include a single pane of glass, a centralized software catalog, self-service via golden path templates, and Tech Docs. RHDH is extensible by plugins.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:36754",
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-12143",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-12151",
"url": "https://access.redhat.com/security/cve/CVE-2026-12151"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-24781",
"url": "https://access.redhat.com/security/cve/CVE-2026-24781"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27136",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42338",
"url": "https://access.redhat.com/security/cve/CVE-2026-42338"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44486",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44487",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44488",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44492",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44494",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44495",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44496",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-45736",
"url": "https://access.redhat.com/security/cve/CVE-2026-45736"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-47131",
"url": "https://access.redhat.com/security/cve/CVE-2026-47131"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-47135",
"url": "https://access.redhat.com/security/cve/CVE-2026-47135"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-47137",
"url": "https://access.redhat.com/security/cve/CVE-2026-47137"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-47139",
"url": "https://access.redhat.com/security/cve/CVE-2026-47139"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-47140",
"url": "https://access.redhat.com/security/cve/CVE-2026-47140"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-47141",
"url": "https://access.redhat.com/security/cve/CVE-2026-47141"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-47208",
"url": "https://access.redhat.com/security/cve/CVE-2026-47208"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-47210",
"url": "https://access.redhat.com/security/cve/CVE-2026-47210"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-48779",
"url": "https://access.redhat.com/security/cve/CVE-2026-48779"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-6322",
"url": "https://access.redhat.com/security/cve/CVE-2026-6322"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-6734",
"url": "https://access.redhat.com/security/cve/CVE-2026-6734"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-9277",
"url": "https://access.redhat.com/security/cve/CVE-2026-9277"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-9673",
"url": "https://access.redhat.com/security/cve/CVE-2026-9673"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-9697",
"url": "https://access.redhat.com/security/cve/CVE-2026-9697"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://catalog.redhat.com/search?gs\u0026searchType=containers\u0026q=rhdh",
"url": "https://catalog.redhat.com/search?gs\u0026searchType=containers\u0026q=rhdh"
},
{
"category": "external",
"summary": "https://developers.redhat.com/rhdh/overview",
"url": "https://developers.redhat.com/rhdh/overview"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_developer_hub",
"url": "https://docs.redhat.com/en/documentation/red_hat_developer_hub"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHDHBUGS-3286",
"url": "https://issues.redhat.com/browse/RHDHBUGS-3286"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHDHBUGS-3288",
"url": "https://issues.redhat.com/browse/RHDHBUGS-3288"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHDHBUGS-3290",
"url": "https://issues.redhat.com/browse/RHDHBUGS-3290"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHDHBUGS-3291",
"url": "https://issues.redhat.com/browse/RHDHBUGS-3291"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHDHBUGS-3293",
"url": "https://issues.redhat.com/browse/RHDHBUGS-3293"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHDHBUGS-3398",
"url": "https://issues.redhat.com/browse/RHDHBUGS-3398"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_36754.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Developer Hub 1.10.2 release.",
"tracking": {
"current_release_date": "2026-08-10T14:57:47+00:00",
"generator": {
"date": "2026-08-10T14:57:47+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.14"
}
},
"id": "RHSA-2026:36754",
"initial_release_date": "2026-07-08T13:07:12+00:00",
"revision_history": [
{
"date": "2026-07-08T13:07:12+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-08T04:36:23+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-10T14:57:47+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Developer Hub 1.10",
"product": {
"name": "Red Hat Developer Hub 1.10",
"product_id": "Red Hat Developer Hub 1.10",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhdh:1.10::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Developer Hub"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"product": {
"name": "registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"product_id": "registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhdh-hub-rhel9@sha256%3A61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02?arch=amd64\u0026repository_url=registry.redhat.io/rhdh/rhdh-hub-rhel9\u0026tag=1783448184"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"product": {
"name": "registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"product_id": "registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhdh-must-gather-rhel9@sha256%3Aaacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1?arch=amd64\u0026repository_url=registry.redhat.io/rhdh/rhdh-must-gather-rhel9\u0026tag=1783447888"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64",
"product": {
"name": "registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64",
"product_id": "registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhdh-rhel9-operator@sha256%3A0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b?arch=amd64\u0026repository_url=registry.redhat.io/rhdh/rhdh-rhel9-operator\u0026tag=1783447707"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"product": {
"name": "registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"product_id": "registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhdh-operator-bundle@sha256%3Ad4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a?arch=amd64\u0026repository_url=registry.redhat.io/rhdh/rhdh-operator-bundle\u0026tag=1783453583"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"product": {
"name": "registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"product_id": "registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhdh-rag-content-rhel9@sha256%3Abea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65?arch=amd64\u0026repository_url=registry.redhat.io/rhdh/rhdh-rag-content-rhel9\u0026tag=1783446803"
}
}
}
],
"category": "architecture",
"name": "amd64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64 as a component of Red Hat Developer Hub 1.10",
"product_id": "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
},
"product_reference": "registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"relates_to_product_reference": "Red Hat Developer Hub 1.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64 as a component of Red Hat Developer Hub 1.10",
"product_id": "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64"
},
"product_reference": "registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"relates_to_product_reference": "Red Hat Developer Hub 1.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64 as a component of Red Hat Developer Hub 1.10",
"product_id": "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64"
},
"product_reference": "registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"relates_to_product_reference": "Red Hat Developer Hub 1.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64 as a component of Red Hat Developer Hub 1.10",
"product_id": "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64"
},
"product_reference": "registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"relates_to_product_reference": "Red Hat Developer Hub 1.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64 as a component of Red Hat Developer Hub 1.10",
"product_id": "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
},
"product_reference": "registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64",
"relates_to_product_reference": "Red Hat Developer Hub 1.10"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-6322",
"cwe": {
"id": "CWE-140",
"name": "Improper Neutralization of Delimiters"
},
"discovery_date": "2026-05-05T11:01:00.332189+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI\u0027s intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the `fast-uri` library allows an attacker to bypass security controls in Red Hat products that process Uniform Resource Identifiers (URIs). By crafting a malicious URI with percent-encoded authority delimiters, an attacker can cause the library to incorrectly interpret the URI\u0027s authority, potentially redirecting applications to an unintended domain. This could lead to a bypass of host allowlist checks, redirect validation, or outbound request routing.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6322"
},
{
"category": "external",
"summary": "RHBZ#2466684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6322",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6322"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6322",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6322"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc"
}
],
"release_date": "2026-05-05T10:29:16.378000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T13:07:12+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling"
},
{
"cve": "CVE-2026-6734",
"cwe": {
"id": "CWE-940",
"name": "Improper Verification of Source of a Communication Channel"
},
"discovery_date": "2026-06-17T19:04:00.272340+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2490024"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in undici. When using Socks5ProxyAgent, undici incorrectly reuses a single connection pool across different origins. This can lead to cross-origin request routing, where sensitive credentials and data intended for one destination are sent to another. Consequently, responses from unintended origins may be trusted, and secure HTTPS connections could be silently downgraded to unencrypted HTTP, resulting in information disclosure and data integrity issues.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undici: undici: Information disclosure and data integrity issues due to incorrect Socks5ProxyAgent connection routing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is rated as an Important security flaw. The `undici` library, when configured with `Socks5ProxyAgent` to handle requests for multiple origins, incorrectly reuses connection pools. This can lead to sensitive data and credentials being misrouted to unintended destinations, potentially downgrading HTTPS connections to HTTP and compromising data integrity and confidentiality. Red Hat products utilizing `undici` with `Socks5ProxyAgent` in multi-origin scenarios are affected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6734"
},
{
"category": "external",
"summary": "RHBZ#2490024",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490024"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6734",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6734"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6734",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6734"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/security/advisories/GHSA-hm92-r4w5-c3mj",
"url": "https://github.com/nodejs/undici/security/advisories/GHSA-hm92-r4w5-c3mj"
}
],
"release_date": "2026-06-17T16:36:55.439000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T13:07:12+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
},
{
"category": "workaround",
"details": "The single most impactful mitigation is applying network egress controls to restrict which external destinations affected applications can reach. Because the vulnerability causes requests to be misrouted to wrong origins, limiting the set of reachable origins directly reduces the attack surface. These controls collectively limit the blast radius of the connection pool misrouting \u2014 the attacker must compromise one of the explicitly allowed destinations rather than any arbitrary origin \u2014 but they do not fix the underlying logic bug.",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "undici: undici: Information disclosure and data integrity issues due to incorrect Socks5ProxyAgent connection routing"
},
{
"cve": "CVE-2026-9277",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2026-05-22T14:01:14.427751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480741"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the shell-quote component. The quote() function did not properly validate object-token inputs, allowing line terminators to pass unescaped into the output. A remote attacker could exploit this vulnerability by providing specially crafted input, which a POSIX shell would interpret as a command separator. This could lead to command injection, enabling the attacker to execute arbitrary code on the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "shell-quote: shell-quote: Arbitrary code execution via command injection due to unescaped line terminators",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-9277"
},
{
"category": "external",
"summary": "RHBZ#2480741",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480741"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-9277",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9277"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-9277",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9277"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote",
"url": "https://github.com/ljharb/shell-quote"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote/commit/1518179",
"url": "https://github.com/ljharb/shell-quote/commit/1518179"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote/security/advisories/GHSA-w7jw-789q-3m8p",
"url": "https://github.com/ljharb/shell-quote/security/advisories/GHSA-w7jw-789q-3m8p"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/shell-quote",
"url": "https://www.npmjs.com/package/shell-quote"
}
],
"release_date": "2026-05-22T13:22:38.873000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T13:07:12+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "shell-quote: shell-quote: Arbitrary code execution via command injection due to unescaped line terminators"
},
{
"cve": "CVE-2026-9673",
"cwe": {
"id": "CWE-1236",
"name": "Improper Neutralization of Formula Elements in a CSV File"
},
"discovery_date": "2026-05-28T06:01:00.245616+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2482486"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in json-2-csv. An attacker can bypass the `preventCsvInjection` option to inject malicious formulas into CSV (Comma Separated Values) files. When these manipulated CSV files are opened in spreadsheet applications, the injected formulas can execute, potentially leading to arbitrary code execution or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "json-2-csv: json-2-csv: CSV Injection vulnerability allows arbitrary code execution via `preventCsvInjection` bypass.",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate vulnerability in `json-2-csv` allows for CSV Injection due to a bypass in the `preventCsvInjection` option. While exploitation requires a user to open a specially crafted CSV file in a spreadsheet application, successful attacks could lead to arbitrary code execution or information disclosure. This affects Red Hat Developer Hub and Red Hat Ansible Automation Platform when processing untrusted data that is subsequently exported to CSV and opened by a user.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-9673"
},
{
"category": "external",
"summary": "RHBZ#2482486",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2482486"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-9673",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9673"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-9673",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9673"
},
{
"category": "external",
"summary": "https://gist.github.com/whoamins/299745a2d36b482b44e9613b78e40613",
"url": "https://gist.github.com/whoamins/299745a2d36b482b44e9613b78e40613"
},
{
"category": "external",
"summary": "https://github.com/mrodrig/json-2-csv/blob/main/src/json2csv.ts%23L410",
"url": "https://github.com/mrodrig/json-2-csv/blob/main/src/json2csv.ts%23L410"
},
{
"category": "external",
"summary": "https://github.com/mrodrig/json-2-csv/commit/0fdd0bb6d0273178cd940afc323ccbce19688229",
"url": "https://github.com/mrodrig/json-2-csv/commit/0fdd0bb6d0273178cd940afc323ccbce19688229"
},
{
"category": "external",
"summary": "https://security.snyk.io/vuln/SNYK-JS-JSON2CSV-14221326",
"url": "https://security.snyk.io/vuln/SNYK-JS-JSON2CSV-14221326"
}
],
"release_date": "2026-05-28T05:00:02.387000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T13:07:12+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "json-2-csv: json-2-csv: CSV Injection vulnerability allows arbitrary code execution via `preventCsvInjection` bypass."
},
{
"cve": "CVE-2026-9697",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-06-17T19:03:30.813843+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2490018"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in undici. When undici\u0027s ProxyAgent is configured with a SOCKS5 proxy Uniform Resource Identifier (URI), it silently ignores Transport Layer Security (TLS) options, such as custom Certificate Authorities (CAs). This allows a remote attacker to perform a Man-in-the-Middle (MITM) attack, intercepting and tampering with HTTPS communications. The connection falls back to Node.js\u0027s default trust store, bypassing intended security configurations and potentially leading to information disclosure or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undici: undici: Man-in-the-Middle attack via ignored TLS options with SOCKS5 proxy",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important vulnerability. Applications using `undici`\u0027s `ProxyAgent` with a SOCKS5 proxy URI will silently ignore user-configured TLS options, including custom Certificate Authorities. This bypasses intended security controls for HTTPS communication, enabling a remote attacker to perform Man-in-the-Middle attacks, potentially leading to information disclosure or arbitrary code execution in affected Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-9697"
},
{
"category": "external",
"summary": "RHBZ#2490018",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490018"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-9697",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9697"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-9697",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9697"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/security/advisories/GHSA-vmh5-mc38-953g",
"url": "https://github.com/nodejs/undici/security/advisories/GHSA-vmh5-mc38-953g"
}
],
"release_date": "2026-06-17T16:46:42.706000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T13:07:12+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "undici: undici: Man-in-the-Middle attack via ignored TLS options with SOCKS5 proxy"
},
{
"cve": "CVE-2026-12143",
"cwe": {
"id": "CWE-93",
"name": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
},
"discovery_date": "2026-06-12T19:00:57.360953+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488480"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (\") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "form-data: form-data: Form field override via CRLF injection",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important impact flaw in the form-data library: a remote attacker can inject arbitrary headers or additional multipart parts via CRLF injection in field names or filenames, potentially overriding sensitive form fields and affecting data integrity.\n\nFor RHOAI and RHEL AI, severity is Moderate because affected versions appear only as a transitive npm dependency in RHOAI (dashboard, mod-arch plugins, MLflow UI) and RHEL AI 3.4 bootc images, and those products use fixed field names for uploads rather than passing untrusted user input as multipart field names or filenames. The documented exploit path is therefore not reachable in default deployments. Practical impact is limited to non-default or custom integrations that forward multipart requests using attacker-controlled field names.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "RHBZ#2488480",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488480"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12143",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12143"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://cwe.mitre.org/data/definitions/93.html",
"url": "https://cwe.mitre.org/data/definitions/93.html"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435",
"url": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229",
"url": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045",
"url": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx",
"url": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx"
},
{
"category": "external",
"summary": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data",
"url": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/form-data",
"url": "https://www.npmjs.com/package/form-data"
}
],
"release_date": "2026-06-12T18:01:30.362000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T13:07:12+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
},
{
"category": "workaround",
"details": "Applications using the `form-data` library should implement strict input validation and sanitization for all field names and filenames derived from untrusted sources. This prevents the injection of control characters (CR, LF, \") that could lead to header injection or form field overrides. Deployments that exclusively use fixed or trusted field names are not impacted.",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "form-data: form-data: Form field override via CRLF injection"
},
{
"cve": "CVE-2026-12151",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-17T17:01:45.297604+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2489980"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in undici. A malicious WebSocket server can exploit this by streaming numerous small or empty continuation frames. This can bypass per-frame and cumulative-size validation, leading to unbounded memory growth in the client process. The primary consequence is memory exhaustion, resulting in a denial of service (DoS) for affected applications using the undici WebSocket client or WebSocketStream API.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in the `undici` WebSocket client allows a remote attacker to cause unbounded memory growth. By sending numerous small or empty WebSocket frames, an unauthenticated attacker can exhaust system memory, leading to a denial of service in Red Hat products that use the affected client.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12151"
},
{
"category": "external",
"summary": "RHBZ#2489980",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489980"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12151"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/security/advisories/GHSA-vxpw-j846-p89q",
"url": "https://github.com/nodejs/undici/security/advisories/GHSA-vxpw-j846-p89q"
}
],
"release_date": "2026-06-17T16:05:38.785000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T13:07:12+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames"
},
{
"cve": "CVE-2026-24781",
"cwe": {
"id": "CWE-653",
"name": "Improper Isolation or Compartmentalization"
},
"discovery_date": "2026-05-04T19:03:41.437468+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466531"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in vm2, an open-source virtual machine (VM) sandbox for Node.js. This vulnerability allows an attacker to escape the sandbox environment by exploiting the `inspect` function. Successful exploitation can lead to arbitrary code execution on the host system, compromising the integrity and confidentiality of the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vm2: vm2: Arbitrary code execution via sandbox breakout through inspect function",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-24781"
},
{
"category": "external",
"summary": "RHBZ#2466531",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466531"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-24781",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-24781"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-24781",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-24781"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/commit/8d30d93213c1898b3e035298b89a814970dd1189",
"url": "https://github.com/patriksimek/vm2/commit/8d30d93213c1898b3e035298b89a814970dd1189"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/commit/bdd3d15e57bc4ec5e70365cd79f7cb0256e5f88c",
"url": "https://github.com/patriksimek/vm2/commit/bdd3d15e57bc4ec5e70365cd79f7cb0256e5f88c"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/commit/fd266d084e0a3322d0f71ba2a8dc4c96cd030228",
"url": "https://github.com/patriksimek/vm2/commit/fd266d084e0a3322d0f71ba2a8dc4c96cd030228"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/releases/tag/v3.11.0",
"url": "https://github.com/patriksimek/vm2/releases/tag/v3.11.0"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/security/advisories/GHSA-v37h-5mfm-c47c",
"url": "https://github.com/patriksimek/vm2/security/advisories/GHSA-v37h-5mfm-c47c"
}
],
"release_date": "2026-05-04T16:33:32.869000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T13:07:12+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "vm2: vm2: Arbitrary code execution via sandbox breakout through inspect function"
},
{
"cve": "CVE-2026-27136",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:00:56.609820+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480757"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in `golang.org/x/net/html` is rated as Important. It allows for Cross-Site Scripting (XSS) attacks by enabling an attacker to bypass HTML sanitization mechanisms when arbitrary HTML is parsed and rendered. This can lead to information disclosure or arbitrary code execution in affected applications. Exploitation typically requires user interaction, where a user processes specially crafted malicious HTML content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "RHBZ#2480757",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27136",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://go.dev/cl/781685",
"url": "https://go.dev/cl/781685"
},
{
"category": "external",
"summary": "https://go.dev/issue/79575",
"url": "https://go.dev/issue/79575"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5030",
"url": "https://pkg.go.dev/vuln/GO-2026-5030"
}
],
"release_date": "2026-05-22T15:01:22.111000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T13:07:12+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T13:07:12+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-42338",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-12T21:01:14.436876+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2476810"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ip-address, a JavaScript library for parsing and manipulating IPv4 and IPv6 addresses. This vulnerability allows a remote attacker to perform cross-site scripting (XSS) by providing untrusted input to the Address6 constructor. When an application renders the output of Address6.group(), Address6.link(), or the AddressError.parseMessage as HTML without proper escaping, the attacker-controlled content can be executed in the user\u0027s browser.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in the `ip-address` JavaScript library is rated as Important. It allows for cross-site scripting (XSS) when an application processes untrusted input through the `Address6` constructor and subsequently renders the unescaped output of methods like `Address6.group()`, `Address6.link()`, or `AddressError.parseMessage` directly as HTML. While the library itself is affected, exploitation is contingent on specific application-level rendering practices that may not be common in Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42338"
},
{
"category": "external",
"summary": "RHBZ#2476810",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2476810"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42338",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42338"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42338",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42338"
},
{
"category": "external",
"summary": "https://github.com/beaugunderson/ip-address/security/advisories/GHSA-v2v4-37r5-5v8g",
"url": "https://github.com/beaugunderson/ip-address/security/advisories/GHSA-v2v4-37r5-5v8g"
}
],
"release_date": "2026-05-12T19:43:16.470000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T13:07:12+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T13:07:12+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
},
{
"cve": "CVE-2026-44486",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:30.944384+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487947"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in the Axios Node.js HTTP adapter. Red Hat products utilizing Axios in a Node.js environment with an authenticated proxy and automatic redirects enabled are susceptible. The vulnerability arises when a request, initially sent through an authenticated proxy, is redirected to a target that no longer uses the proxy, potentially leaking `Proxy-Authorization` headers containing sensitive credentials to an untrusted remote server. This risk is heightened in deployments where applications interact with untrusted HTTP origins.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "RHBZ#2487947",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487947"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44486",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44486"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc",
"url": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc"
}
],
"release_date": "2026-06-11T15:39:07.714000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T13:07:12+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects"
},
{
"cve": "CVE-2026-44487",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:34.091476+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487948"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via redirect flows",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in Axios affecting Node.js environments. When an application uses Axios with an authenticated HTTP proxy and follows redirects from an HTTP to a non-proxied HTTPS destination, the Proxy-Authorization header may be inadvertently sent to the final origin server. This could lead to the exposure of sensitive proxy credentials to an unintended third party.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "RHBZ#2487948",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487948"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44487",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44487"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v",
"url": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v"
}
],
"release_date": "2026-06-11T15:38:25.150000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T13:07:12+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via redirect flows"
},
{
"cve": "CVE-2026-44488",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-11T17:01:36.836488+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487949"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Denial of Service due to unenforced request and response size limits",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A denial of service flaw was found in Axios, a JavaScript HTTP client library. This issue arises when applications utilize the `fetch` adapter, as configured request and response size limits are not properly enforced. A remote attacker could exploit this by sending or receiving excessively large data bodies, leading to resource exhaustion and potential denial of service in affected server-side applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "RHBZ#2487949",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487949"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf"
}
],
"release_date": "2026-06-11T15:37:38.013000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T13:07:12+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Denial of Service due to unenforced request and response size limits"
},
{
"cve": "CVE-2026-44492",
"cwe": {
"id": "CWE-289",
"name": "Authentication Bypass by Alternate Name"
},
"discovery_date": "2026-06-11T17:00:56.761751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487938"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Axios, a JavaScript HTTP client library, that allows for a proxy bypass. When a `NO_PROXY` environment variable is configured to prevent direct connections to specific IPv4 addresses, an attacker can craft a request URL using the IPv4-mapped IPv6 address format. This bypasses the intended `NO_PROXY` exclusion, routing the request through the configured proxy and potentially exposing internal services or sensitive information, such as cloud instance metadata credentials.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "RHBZ#2487938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487938"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44492"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv",
"url": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv"
}
],
"release_date": "2026-06-11T15:29:13.890000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T13:07:12+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization"
},
{
"cve": "CVE-2026-44494",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:01:12.945664+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487942"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. This vulnerability, a Prototype Pollution \"Gadget\" attack, allows an attacker to escalate any existing Object.prototype pollution in an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the Axios library allows an attacker to escalate existing prototype pollution vulnerabilities within an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. By injecting a malicious proxy configuration into the `Object.prototype`, an attacker can intercept, read, and modify all HTTP traffic, including sensitive authentication credentials, without direct user interaction. This poses a significant risk to data confidentiality and integrity in Red Hat products that utilize the Axios library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "RHBZ#2487942",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487942"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44494",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44494"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh",
"url": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh"
}
],
"release_date": "2026-06-11T15:32:03.155000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T13:07:12+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution"
},
{
"cve": "CVE-2026-44495",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:00:53.999811+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487937"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure due to prototype pollution vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Axios, a promise-based HTTP client, can lead to information disclosure, including credential theft and response hijacking, or denial of service. Exploitation requires a separate prototype pollution vulnerability in the same JavaScript process, allowing an attacker to control `Object.prototype.transformResponse`. Red Hat products using affected Axios versions are at risk if another component introduces such pollution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "RHBZ#2487937",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487937"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44495",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw"
}
],
"release_date": "2026-06-11T15:33:12.433000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T13:07:12+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure due to prototype pollution vulnerability"
},
{
"cve": "CVE-2026-44496",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-06-11T17:01:15.856386+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487943"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in Axios can lead to a client-side Denial of Service. An attacker capable of influencing the XSRF cookie name within a browser environment could trigger excessive regular expression processing, causing the affected browser tab to freeze and degrade user availability. This issue specifically impacts browser-based applications and does not affect Node.js HTTP adapter usage, React Native, or web workers.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "RHBZ#2487943",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487943"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44496",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44496"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf"
}
],
"release_date": "2026-06-11T15:34:28.492000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T13:07:12+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name"
},
{
"cve": "CVE-2026-45736",
"cwe": {
"id": "CWE-824",
"name": "Access of Uninitialized Pointer"
},
"discovery_date": "2026-05-15T16:00:55.786944+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477914"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ws, an open source WebSocket client and server for Node.js. The `websocket.close()` implementation is vulnerable to uninitialized memory disclosure when a `TypedArray` is passed as the reason argument. This can lead to the disclosure of sensitive information from uninitialized memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray`",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in the `ws` WebSocket library for Node.js could lead to sensitive information disclosure. The flaw occurs when a `TypedArray` is specifically provided as the `reason` argument to the `websocket.close()` function, potentially exposing uninitialized memory. Red Hat products utilizing this library may be affected if their implementations allow for such a crafted `close()` call.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45736"
},
{
"category": "external",
"summary": "RHBZ#2477914",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477914"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45736",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45736"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45736",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45736"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/c0327ec15a54d701eb6ccefaa8bef328cfc03086",
"url": "https://github.com/websockets/ws/commit/c0327ec15a54d701eb6ccefaa8bef328cfc03086"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/security/advisories/GHSA-58qx-3vcg-4xpx",
"url": "https://github.com/websockets/ws/security/advisories/GHSA-58qx-3vcg-4xpx"
}
],
"release_date": "2026-05-15T14:53:57.263000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T13:07:12+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray`"
},
{
"cve": "CVE-2026-47131",
"cwe": {
"id": "CWE-843",
"name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
},
"discovery_date": "2026-06-12T15:01:52.744009+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488393"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in vm2, an open-source virtual machine (VM) sandbox for Node.js. A remote attacker can exploit this vulnerability by combining specific Buffer function calls and Node.js\u0027s ERR_INVALID_ARG_TYPE error. This allows the attacker to obtain the host\u0027s TypeError constructor, leading to an escape from the sandbox. Consequently, this enables attackers to run arbitrary code on the host system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vm2: vm2: Arbitrary code execution via sandbox escape vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The Red Hat Product Security team has rated the impact of this vulnerability as Moderate in Red Hat Developer Hub and Ansible Automation Platform.The affected package is present in both products as a transitive dependency; however, the vulnerable sandbox functionality is not invoked in any production code path. The active sandboxing mechanism used by both products does not rely on this package, and user-supplied input cannot reach the vulnerable code under a standard deployment. Exploitation would require an attacker to independently route arbitrary JavaScript into the sandbox runtime, a condition not present in the default configuration of either product.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-47131"
},
{
"category": "external",
"summary": "RHBZ#2488393",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488393"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-47131",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47131"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47131",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47131"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/commit/27c525f4615e2b983f122e2bed327d810126f5c8",
"url": "https://github.com/patriksimek/vm2/commit/27c525f4615e2b983f122e2bed327d810126f5c8"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/releases/tag/v3.11.4",
"url": "https://github.com/patriksimek/vm2/releases/tag/v3.11.4"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/security/advisories/GHSA-v6mx-mf47-r5wg",
"url": "https://github.com/patriksimek/vm2/security/advisories/GHSA-v6mx-mf47-r5wg"
}
],
"release_date": "2026-06-12T14:14:17.037000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T13:07:12+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "vm2: vm2: Arbitrary code execution via sandbox escape vulnerability"
},
{
"cve": "CVE-2026-47135",
"cwe": {
"id": "CWE-1100",
"name": "Insufficient Isolation of System-Dependent Functions"
},
"discovery_date": "2026-06-12T15:02:02.154869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488396"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in vm2, an open-source virtual machine (VM) sandbox for Node.js. An attacker within the sandbox could exploit incomplete symbol interception and missing security checks to gain control over the host system. This could allow the attacker to execute arbitrary code outside the sandbox environment, leading to a complete compromise of the host.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vm2: vm2: Sandbox escape allows arbitrary code execution on the host system",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability has been rated as Moderate for Red Hat Developer Hub and Red Hat Ansible Automation Platform. The vm2 sandbox exists as a transitive dependency in Red Hat Developer Hub and is only utilized during build time. The sandbox is therefore not exposed on the production code path. Exploitation of this vulnerability requires attackers to write cross-realm symbol keys to host objects which is not possible in the default configuration of Red Hat Developer Hub.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-47135"
},
{
"category": "external",
"summary": "RHBZ#2488396",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488396"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-47135",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47135"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47135",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47135"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/commit/928aef51898b5c52a05f05a40c4cfeb52e172878",
"url": "https://github.com/patriksimek/vm2/commit/928aef51898b5c52a05f05a40c4cfeb52e172878"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/releases/tag/v3.11.4",
"url": "https://github.com/patriksimek/vm2/releases/tag/v3.11.4"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/security/advisories/GHSA-m5q2-4fm3-vfqp",
"url": "https://github.com/patriksimek/vm2/security/advisories/GHSA-m5q2-4fm3-vfqp"
}
],
"release_date": "2026-06-12T14:14:42.022000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T13:07:12+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "vm2: vm2: Sandbox escape allows arbitrary code execution on the host system"
},
{
"cve": "CVE-2026-47137",
"cwe": {
"id": "CWE-480",
"name": "Use of Incorrect Operator"
},
"discovery_date": "2026-06-12T15:01:24.611905+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488385"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in vm2, an open-source virtual machine (VM) sandbox for Node.js. A remote attacker could bypass a security check designed to prevent the combination of nested environments and disabled module loading. This bypass occurs because a strict equality check for the `require` option can be circumvented by simply omitting the option, leading to an unintended configuration. Successful exploitation of this vulnerability could allow an attacker to escape the sandbox and achieve arbitrary code execution on the host system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vm2: vm2: Sandbox escape leading to arbitrary code execution via security bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The Red Hat Product Security team has rated the impact of this vulnerability as Moderate in Red Hat Developer Hub and Ansible Automation Platform.The affected package is present in both products as a transitive dependency; however, the vulnerable sandbox functionality is not invoked in any production code path. The active sandboxing mechanism used by both products does not rely on this package, and user-supplied input cannot reach the vulnerable code under a standard deployment. Exploitation would require an attacker to independently route arbitrary JavaScript into the sandbox runtime, a condition not present in the default configuration of either product.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-47137"
},
{
"category": "external",
"summary": "RHBZ#2488385",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488385"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-47137",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47137"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47137",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47137"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-g644-9gfx-q4q4",
"url": "https://github.com/advisories/GHSA-g644-9gfx-q4q4"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/commit/01a7552add345d5a6862623884e6b79a85bf0568",
"url": "https://github.com/patriksimek/vm2/commit/01a7552add345d5a6862623884e6b79a85bf0568"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/commit/86ab819f202c3a8dad88cef5705f2e416c5188d7",
"url": "https://github.com/patriksimek/vm2/commit/86ab819f202c3a8dad88cef5705f2e416c5188d7"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/releases/tag/v3.11.4",
"url": "https://github.com/patriksimek/vm2/releases/tag/v3.11.4"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/security/advisories/GHSA-m4wx-m65x-ghrr",
"url": "https://github.com/patriksimek/vm2/security/advisories/GHSA-m4wx-m65x-ghrr"
}
],
"release_date": "2026-06-12T14:15:34.795000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T13:07:12+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "vm2: vm2: Sandbox escape leading to arbitrary code execution via security bypass"
},
{
"cve": "CVE-2026-47139",
"cwe": {
"id": "CWE-1100",
"name": "Insufficient Isolation of System-Dependent Functions"
},
"discovery_date": "2026-06-12T15:01:31.104545+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488387"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in vm2, a Node.js sandbox. This vulnerability allows sandboxed code to bypass network restrictions by utilizing internal HTTP built-ins, such as _http_client and _http_server. An attacker can exploit this to make outbound HTTP requests or open listening HTTP sockets, even when public network modules are explicitly denied. This could lead to unauthorized information disclosure or further compromise of the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vm2: vm2: Sandbox escape via internal HTTP built-ins leading to network restriction bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability has been rated as Moderate for Red Hat Developer Hub and Red Hat Ansible Automation Platform. The vm2 sandbox exists as a transitive dependency in Red Hat Developer Hub and is only utilized during build time. The sandbox is therefore not exposed on the production code path. Exploitation of this vulnerability requires attackers to access internal HTTP built-ins which is not possible in the default configuration of Red Hat Developer Hub.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-47139"
},
{
"category": "external",
"summary": "RHBZ#2488387",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488387"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-47139",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47139"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47139",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47139"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/commit/436053e30eecbabd487e2fd2959c137ac34e2bb1",
"url": "https://github.com/patriksimek/vm2/commit/436053e30eecbabd487e2fd2959c137ac34e2bb1"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/releases/tag/v3.11.4",
"url": "https://github.com/patriksimek/vm2/releases/tag/v3.11.4"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/security/advisories/GHSA-r9pm-gxmw-wv6p",
"url": "https://github.com/patriksimek/vm2/security/advisories/GHSA-r9pm-gxmw-wv6p"
}
],
"release_date": "2026-06-12T14:15:44.652000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T13:07:12+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "vm2: vm2: Sandbox escape via internal HTTP built-ins leading to network restriction bypass"
},
{
"cve": "CVE-2026-47140",
"cwe": {
"id": "CWE-184",
"name": "Incomplete List of Disallowed Inputs"
},
"discovery_date": "2026-06-12T15:01:11.705175+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488381"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in vm2, an open-source virtual machine (VM) sandbox for Node.js. This vulnerability allows sandboxed code to bypass intended security restrictions by exploiting missing entries in the denylist for dangerous Node.js built-in functions, specifically `process` and `inspector/promises`. A remote attacker can leverage this to execute arbitrary code in the host process, leading to a complete compromise of the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vm2: vm2: Arbitrary code execution due to incomplete sandbox restrictions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The Red Hat Product Security team has rated the impact of this vulnerability as Moderate in Red Hat Developer Hub and Ansible Automation Platform.The affected package is present in both products as a transitive dependency; however, the vulnerable sandbox functionality is not invoked in any production code path. The active sandboxing mechanism used by both products does not rely on this package, and user-supplied input cannot reach the vulnerable code under a standard deployment. Exploitation would require an attacker to independently route arbitrary JavaScript into the sandbox runtime, a condition not present in the default configuration of either product.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-47140"
},
{
"category": "external",
"summary": "RHBZ#2488381",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488381"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-47140",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47140"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47140",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47140"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/commit/a1ed47a98d1cc36cb48c0d566d55889688e0b59b",
"url": "https://github.com/patriksimek/vm2/commit/a1ed47a98d1cc36cb48c0d566d55889688e0b59b"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/releases/tag/v3.11.4",
"url": "https://github.com/patriksimek/vm2/releases/tag/v3.11.4"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/security/advisories/GHSA-rp36-8xq3-r6c4",
"url": "https://github.com/patriksimek/vm2/security/advisories/GHSA-rp36-8xq3-r6c4"
}
],
"release_date": "2026-06-12T14:16:10.727000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T13:07:12+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "vm2: vm2: Arbitrary code execution due to incomplete sandbox restrictions"
},
{
"cve": "CVE-2026-47141",
"cwe": {
"id": "CWE-653",
"name": "Improper Isolation or Compartmentalization"
},
"discovery_date": "2026-06-12T15:01:05.444374+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488379"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in vm2, an open-source virtual machine (VM) sandbox for Node.js. Prior to version 3.11.4, NodeVM, a component of vm2, improperly exposed certain process-wide observability builtins, such as diagnostics_channel, async_hooks, and perf_hooks. These builtins, which are designed for monitoring and debugging, were not adequately blocked by the dangerous builtin denylist. This oversight allowed sandboxed code to observe sensitive host application data, leading to information disclosure across the vm2 security boundary.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vm2: vm2: NodeVM observability builtins leak host process and HTTP request data",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability has been rated as Moderate for Red Hat Developer Hub and Red Hat Ansible Automation Platform. The vm2 sandbox exists as a transitive dependency in Red Hat Developer Hub and is only utilized during build time. The sandbox is therefore not exposed on the production code path. Exploitation of this vulnerability requires attackers to access process-wide observability builtins which is not possible in the default configuration of Red Hat Developer Hub.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-47141"
},
{
"category": "external",
"summary": "RHBZ#2488379",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488379"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-47141",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47141"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47141",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47141"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/commit/e1c48fce05189f48e71efbd32af0754efa4066bb",
"url": "https://github.com/patriksimek/vm2/commit/e1c48fce05189f48e71efbd32af0754efa4066bb"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/releases/tag/v3.11.4",
"url": "https://github.com/patriksimek/vm2/releases/tag/v3.11.4"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/security/advisories/GHSA-9g8x-92q2-p28f",
"url": "https://github.com/patriksimek/vm2/security/advisories/GHSA-9g8x-92q2-p28f"
}
],
"release_date": "2026-06-12T14:17:35.970000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T13:07:12+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "vm2: vm2: NodeVM observability builtins leak host process and HTTP request data"
},
{
"cve": "CVE-2026-47208",
"discovery_date": "2026-06-12T15:01:14.630546+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488382"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in vm2, an open-source virtual machine (VM) sandbox for Node.js. This vulnerability allows an attacker to escape the sandbox environment by writing malicious code. Successful exploitation can lead to arbitrary code execution on the host system, compromising the integrity and confidentiality of the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vm2: vm2: Sandbox Breakout Using Promise Species",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation requires an attacker to supply untrusted malicious code to the vm2 sandbox, which is easily achieved since the component\u0027s main purpose is to execute untrusted code.\n\nEscaping the sandbox completely bypasses the intended security boundaries, leading directly to arbitrary code execution on the host system and a full compromise of confidentiality and integrity",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-47208"
},
{
"category": "external",
"summary": "RHBZ#2488382",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488382"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-47208",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47208"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47208",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47208"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/commit/a462655009669c3124ee39498121651597529ea8",
"url": "https://github.com/patriksimek/vm2/commit/a462655009669c3124ee39498121651597529ea8"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/releases/tag/v3.11.4",
"url": "https://github.com/patriksimek/vm2/releases/tag/v3.11.4"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/security/advisories/GHSA-76w7-j9cq-rx2j",
"url": "https://github.com/patriksimek/vm2/security/advisories/GHSA-76w7-j9cq-rx2j"
}
],
"release_date": "2026-06-12T14:16:22.726000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T13:07:12+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "vm2: vm2: Sandbox Breakout Using Promise Species"
},
{
"cve": "CVE-2026-47210",
"cwe": {
"id": "CWE-653",
"name": "Improper Isolation or Compartmentalization"
},
"discovery_date": "2026-06-12T15:01:38.846673+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488389"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in vm2, an open-source virtual machine (VM) sandbox for Node.js. This sandbox escape vulnerability allows an attacker to execute arbitrary code in the host process. This occurs when untrusted code is executed with asynchronous (async) support on runtimes that expose WebAssembly JavaScript Promise Integration (JSPI). Specifically, a JSPI-backed Promise can bypass expected Promise-species hardening, exposing a host-originated rejection object to attacker-controlled logic and breaking the sandbox boundary.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vm2: vm2: Arbitrary code execution via sandbox escape when executing untrusted code with async support.",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The Red Hat Product Security team has rated the impact of this vulnerability as Moderate in Red Hat Developer Hub and Ansible Automation Platform.The affected package is present in both products as a transitive dependency; however, the vulnerable sandbox functionality is not invoked in any production code path. The active sandboxing mechanism used by both products does not rely on this package, and user-supplied input cannot reach the vulnerable code under a standard deployment. Exploitation would require an attacker to independently route arbitrary JavaScript into the sandbox runtime, a condition not present in the default configuration of either product.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-47210"
},
{
"category": "external",
"summary": "RHBZ#2488389",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488389"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-47210",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47210"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47210",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47210"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/commit/6915fa4d9bcebd47b9a4f39a1adc1aa94ef6ffc6",
"url": "https://github.com/patriksimek/vm2/commit/6915fa4d9bcebd47b9a4f39a1adc1aa94ef6ffc6"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/releases/tag/v3.11.4",
"url": "https://github.com/patriksimek/vm2/releases/tag/v3.11.4"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/security/advisories/GHSA-6j2x-vhqr-qr7q",
"url": "https://github.com/patriksimek/vm2/security/advisories/GHSA-6j2x-vhqr-qr7q"
}
],
"release_date": "2026-06-12T14:17:22.653000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T13:07:12+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "vm2: vm2: Arbitrary code execution via sandbox escape when executing untrusted code with async support."
},
{
"cve": "CVE-2026-48779",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-16T22:01:24.571224+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2489661"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that consume excessive memory. Consequently, this leads to process termination and a denial of service (DoS) for the remote peer.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `ws` WebSocket library. A remote attacker can exploit this flaw by sending a high volume of small, fragmented data, leading to excessive memory consumption and subsequent process termination. This can result in service disruption for Red Hat products that utilize `ws` for WebSocket communication.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48779"
},
{
"category": "external",
"summary": "RHBZ#2489661",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489661"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48779",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48779"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48779",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48779"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7",
"url": "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53",
"url": "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94",
"url": "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8",
"url": "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p",
"url": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p"
}
],
"release_date": "2026-06-16T21:26:22.537000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-08T13:07:12+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:aacbef97f59305a91db44c3c92c34509027b3d2a4ece07716e6fe8b217dd5ee1_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:d4208a03e389fe82e7da2d27c491251e6d43a0b473aa80d3e6a351c77582a92a_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:bea9305c453e377dfe6abf20076aec408efe2cbcf05f5a1c04c9b2d2f288bd65_amd64",
"Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:0856143fa78dbbd74c1c068c75c265451698913608009f40600bb7c46928739b_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
Loading…
Loading…