{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update is now available for Red Hat Lightspeed (formerly Insights) for Runtimes on RHEL 9.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "An update is now available for Red Hat Lightspeed (formerly Insights) for Runtimes on RHEL 9.\n\nSecurity fix(es):\n\n* jackson-core: Denial of Service via incomplete fix in async JSON parser (CVE-2026-68494)\n* jackson-databind: @JsonIgnore bypass in Java Records (CVE-2026-59888)\n* jackson-databind: Denial of Service via deeply nested JSON processing (CVE-2026-50193)\n* jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass (CVE-2026-54512)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:54440",
        "url": "https://access.redhat.com/errata/RHSA-2026:54440"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-50193",
        "url": "https://access.redhat.com/security/cve/CVE-2026-50193"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-54512",
        "url": "https://access.redhat.com/security/cve/CVE-2026-54512"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-59888",
        "url": "https://access.redhat.com/security/cve/CVE-2026-59888"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-68494",
        "url": "https://access.redhat.com/security/cve/CVE-2026-68494"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54440.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat Lightspeed (formerly Insights) for Runtimes security update",
    "tracking": {
      "current_release_date": "2026-08-12T22:04:25+00:00",
      "generator": {
        "date": "2026-08-12T22:04:25+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.14"
        }
      },
      "id": "RHSA-2026:54440",
      "initial_release_date": "2026-08-12T22:01:08+00:00",
      "revision_history": [
        {
          "date": "2026-08-12T22:01:08+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-08-12T22:01:31+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-08-12T22:04:25+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0",
                "product": {
                  "name": "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0",
                  "product_id": "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Lightspeed (formerly Insights) for Runtimes"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:a6fc33e05610c80a5f2be7589394eaf9ea7e85568d001c601a214535df7e9a85_amd64",
                "product": {
                  "name": "registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:a6fc33e05610c80a5f2be7589394eaf9ea7e85568d001c601a214535df7e9a85_amd64",
                  "product_id": "registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:a6fc33e05610c80a5f2be7589394eaf9ea7e85568d001c601a214535df7e9a85_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/runtimes-agent-init-rhel9@sha256%3Aa6fc33e05610c80a5f2be7589394eaf9ea7e85568d001c601a214535df7e9a85?arch=amd64\u0026repository_url=registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9\u0026tag=1786378722"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:5e413617445a6f5b238d5b45dae157df63c974b5a0262bce8754cdd3296f86a3_arm64",
                "product": {
                  "name": "registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:5e413617445a6f5b238d5b45dae157df63c974b5a0262bce8754cdd3296f86a3_arm64",
                  "product_id": "registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:5e413617445a6f5b238d5b45dae157df63c974b5a0262bce8754cdd3296f86a3_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/runtimes-agent-init-rhel9@sha256%3A5e413617445a6f5b238d5b45dae157df63c974b5a0262bce8754cdd3296f86a3?arch=arm64\u0026repository_url=registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9\u0026tag=1786378722"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:a2dd47734aa704b52c3ff8c9101c8309ea5647abf5d0b6d5a4e38627270f3d61_ppc64le",
                "product": {
                  "name": "registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:a2dd47734aa704b52c3ff8c9101c8309ea5647abf5d0b6d5a4e38627270f3d61_ppc64le",
                  "product_id": "registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:a2dd47734aa704b52c3ff8c9101c8309ea5647abf5d0b6d5a4e38627270f3d61_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/runtimes-agent-init-rhel9@sha256%3Aa2dd47734aa704b52c3ff8c9101c8309ea5647abf5d0b6d5a4e38627270f3d61?arch=ppc64le\u0026repository_url=registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9\u0026tag=1786378722"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:5281c5150f8c786098bbaf43d036ca89ed21cf2bf68f09236de82fda4740dd27_s390x",
                "product": {
                  "name": "registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:5281c5150f8c786098bbaf43d036ca89ed21cf2bf68f09236de82fda4740dd27_s390x",
                  "product_id": "registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:5281c5150f8c786098bbaf43d036ca89ed21cf2bf68f09236de82fda4740dd27_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/runtimes-agent-init-rhel9@sha256%3A5281c5150f8c786098bbaf43d036ca89ed21cf2bf68f09236de82fda4740dd27?arch=s390x\u0026repository_url=registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9\u0026tag=1786378722"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:5281c5150f8c786098bbaf43d036ca89ed21cf2bf68f09236de82fda4740dd27_s390x as a component of Red Hat Lightspeed (formerly Insights) for Runtimes 1.0",
          "product_id": "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:5281c5150f8c786098bbaf43d036ca89ed21cf2bf68f09236de82fda4740dd27_s390x"
        },
        "product_reference": "registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:5281c5150f8c786098bbaf43d036ca89ed21cf2bf68f09236de82fda4740dd27_s390x",
        "relates_to_product_reference": "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:5e413617445a6f5b238d5b45dae157df63c974b5a0262bce8754cdd3296f86a3_arm64 as a component of Red Hat Lightspeed (formerly Insights) for Runtimes 1.0",
          "product_id": "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:5e413617445a6f5b238d5b45dae157df63c974b5a0262bce8754cdd3296f86a3_arm64"
        },
        "product_reference": "registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:5e413617445a6f5b238d5b45dae157df63c974b5a0262bce8754cdd3296f86a3_arm64",
        "relates_to_product_reference": "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:a2dd47734aa704b52c3ff8c9101c8309ea5647abf5d0b6d5a4e38627270f3d61_ppc64le as a component of Red Hat Lightspeed (formerly Insights) for Runtimes 1.0",
          "product_id": "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:a2dd47734aa704b52c3ff8c9101c8309ea5647abf5d0b6d5a4e38627270f3d61_ppc64le"
        },
        "product_reference": "registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:a2dd47734aa704b52c3ff8c9101c8309ea5647abf5d0b6d5a4e38627270f3d61_ppc64le",
        "relates_to_product_reference": "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:a6fc33e05610c80a5f2be7589394eaf9ea7e85568d001c601a214535df7e9a85_amd64 as a component of Red Hat Lightspeed (formerly Insights) for Runtimes 1.0",
          "product_id": "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:a6fc33e05610c80a5f2be7589394eaf9ea7e85568d001c601a214535df7e9a85_amd64"
        },
        "product_reference": "registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:a6fc33e05610c80a5f2be7589394eaf9ea7e85568d001c601a214535df7e9a85_amd64",
        "relates_to_product_reference": "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-50193",
      "cwe": {
        "id": "CWE-1050",
        "name": "Excessive Platform Resource Consumption within a Loop"
      },
      "discovery_date": "2026-06-23T22:01:01.154533+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2491999"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in jackson-databind, a general-purpose data-binding library for Jackson Data Processor. A remote attacker can exploit this vulnerability by sending deeply nested JSON (JavaScript Object Notation) data to a service that reads and processes it. This can lead to a Denial of Service (DoS) by consuming significant system resources, making the service unavailable to legitimate users.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jackson-databind: Jackson-databind: Denial of Service via deeply nested JSON processing",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial-of-service flaw in jackson-databind, affecting services that process deeply nested JSON data. Exploitation occurs when a service reads JSON as `JsonNode` and subsequently writes it back using `JsonNode.toString()`, leading to excessive resource consumption and potential service unavailability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:5281c5150f8c786098bbaf43d036ca89ed21cf2bf68f09236de82fda4740dd27_s390x",
          "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:5e413617445a6f5b238d5b45dae157df63c974b5a0262bce8754cdd3296f86a3_arm64",
          "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:a2dd47734aa704b52c3ff8c9101c8309ea5647abf5d0b6d5a4e38627270f3d61_ppc64le",
          "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:a6fc33e05610c80a5f2be7589394eaf9ea7e85568d001c601a214535df7e9a85_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-50193"
        },
        {
          "category": "external",
          "summary": "RHBZ#2491999",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2491999"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-50193",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-50193"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50193",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50193"
        },
        {
          "category": "external",
          "summary": "https://github.com/FasterXML/jackson-databind/commit/a1fa4ae4ecf5cee16da465985f135f3e81816f8c",
          "url": "https://github.com/FasterXML/jackson-databind/commit/a1fa4ae4ecf5cee16da465985f135f3e81816f8c"
        },
        {
          "category": "external",
          "summary": "https://github.com/FasterXML/jackson-databind/issues/3447",
          "url": "https://github.com/FasterXML/jackson-databind/issues/3447"
        },
        {
          "category": "external",
          "summary": "https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-3wrr-7qpf-2prh",
          "url": "https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-3wrr-7qpf-2prh"
        }
      ],
      "release_date": "2026-06-23T21:00:20.444000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-12T22:01:08+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:5281c5150f8c786098bbaf43d036ca89ed21cf2bf68f09236de82fda4740dd27_s390x",
            "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:5e413617445a6f5b238d5b45dae157df63c974b5a0262bce8754cdd3296f86a3_arm64",
            "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:a2dd47734aa704b52c3ff8c9101c8309ea5647abf5d0b6d5a4e38627270f3d61_ppc64le",
            "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:a6fc33e05610c80a5f2be7589394eaf9ea7e85568d001c601a214535df7e9a85_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:54440"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:5281c5150f8c786098bbaf43d036ca89ed21cf2bf68f09236de82fda4740dd27_s390x",
            "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:5e413617445a6f5b238d5b45dae157df63c974b5a0262bce8754cdd3296f86a3_arm64",
            "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:a2dd47734aa704b52c3ff8c9101c8309ea5647abf5d0b6d5a4e38627270f3d61_ppc64le",
            "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:a6fc33e05610c80a5f2be7589394eaf9ea7e85568d001c601a214535df7e9a85_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:5281c5150f8c786098bbaf43d036ca89ed21cf2bf68f09236de82fda4740dd27_s390x",
            "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:5e413617445a6f5b238d5b45dae157df63c974b5a0262bce8754cdd3296f86a3_arm64",
            "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:a2dd47734aa704b52c3ff8c9101c8309ea5647abf5d0b6d5a4e38627270f3d61_ppc64le",
            "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:a6fc33e05610c80a5f2be7589394eaf9ea7e85568d001c601a214535df7e9a85_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "jackson-databind: Jackson-databind: Denial of Service via deeply nested JSON processing"
    },
    {
      "cve": "CVE-2026-54512",
      "cwe": {
        "id": "CWE-502",
        "name": "Deserialization of Untrusted Data"
      },
      "discovery_date": "2026-06-23T22:01:49.821346+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2492015"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in jackson-databind. This vulnerability allows a remote attacker to bypass the PolymorphicTypeValidator (PTV) when polymorphic typing is enabled and a type identifier contains generic parameters. By crafting a malicious type ID, an attacker can place a denied class as a generic type parameter of an allowed container. This leads to the loading and instantiation of arbitrary classes, potentially resulting in arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability in `jackson-databind` is rated as Important. While it describes a potential bypass of the PolymorphicTypeValidator leading to arbitrary code execution, exploitation requires an attacker to already possess administrative privileges, specifically the `manage-realm` role. This flaw does not enable privilege escalation, as it does not grant additional capabilities beyond those inherently available to an existing administrator.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:5281c5150f8c786098bbaf43d036ca89ed21cf2bf68f09236de82fda4740dd27_s390x",
          "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:5e413617445a6f5b238d5b45dae157df63c974b5a0262bce8754cdd3296f86a3_arm64",
          "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:a2dd47734aa704b52c3ff8c9101c8309ea5647abf5d0b6d5a4e38627270f3d61_ppc64le",
          "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:a6fc33e05610c80a5f2be7589394eaf9ea7e85568d001c601a214535df7e9a85_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-54512"
        },
        {
          "category": "external",
          "summary": "RHBZ#2492015",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492015"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-54512",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-54512"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-54512",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54512"
        },
        {
          "category": "external",
          "summary": "https://github.com/FasterXML/jackson-databind/commit/434d6c511de7fdd9872f29157aafb6162d12d8d5",
          "url": "https://github.com/FasterXML/jackson-databind/commit/434d6c511de7fdd9872f29157aafb6162d12d8d5"
        },
        {
          "category": "external",
          "summary": "https://github.com/FasterXML/jackson-databind/issues/5988",
          "url": "https://github.com/FasterXML/jackson-databind/issues/5988"
        },
        {
          "category": "external",
          "summary": "https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-j3rv-43j4-c7qm",
          "url": "https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-j3rv-43j4-c7qm"
        }
      ],
      "release_date": "2026-06-23T20:56:36.646000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-12T22:01:08+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:5281c5150f8c786098bbaf43d036ca89ed21cf2bf68f09236de82fda4740dd27_s390x",
            "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:5e413617445a6f5b238d5b45dae157df63c974b5a0262bce8754cdd3296f86a3_arm64",
            "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:a2dd47734aa704b52c3ff8c9101c8309ea5647abf5d0b6d5a4e38627270f3d61_ppc64le",
            "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:a6fc33e05610c80a5f2be7589394eaf9ea7e85568d001c601a214535df7e9a85_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:54440"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:5281c5150f8c786098bbaf43d036ca89ed21cf2bf68f09236de82fda4740dd27_s390x",
            "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:5e413617445a6f5b238d5b45dae157df63c974b5a0262bce8754cdd3296f86a3_arm64",
            "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:a2dd47734aa704b52c3ff8c9101c8309ea5647abf5d0b6d5a4e38627270f3d61_ppc64le",
            "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:a6fc33e05610c80a5f2be7589394eaf9ea7e85568d001c601a214535df7e9a85_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:5281c5150f8c786098bbaf43d036ca89ed21cf2bf68f09236de82fda4740dd27_s390x",
            "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:5e413617445a6f5b238d5b45dae157df63c974b5a0262bce8754cdd3296f86a3_arm64",
            "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:a2dd47734aa704b52c3ff8c9101c8309ea5647abf5d0b6d5a4e38627270f3d61_ppc64le",
            "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:a6fc33e05610c80a5f2be7589394eaf9ea7e85568d001c601a214535df7e9a85_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass"
    },
    {
      "cve": "CVE-2026-59888",
      "cwe": {
        "id": "CWE-915",
        "name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
      },
      "discovery_date": "2026-07-14T18:02:08.404867+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2500096"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in jackson-databind. When Java Records use a PropertyNamingStrategy, an attacker can bypass the @JsonIgnore annotation during deserialization. This allows a renamed JSON key to be assigned to a Record constructor parameter, even if it was intended to be ignored. Consequently, an untrusted client could set internal or privileged components from external input, potentially leading to unauthorized modification or disclosure of sensitive data.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: @JsonIgnore bypass in Java Records",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Moderate impact. This flaw in jackson-databind allows an attacker to bypass the @JsonIgnore annotation when deserializing Java Records that utilize a PropertyNamingStrategy. An untrusted client could exploit this to assign values to internal or privileged Record constructor parameters, potentially leading to unauthorized data modification or disclosure. Red Hat products using affected versions of jackson-databind for deserialization of external input into Java Records with PropertyNamingStrategy are susceptible.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:5281c5150f8c786098bbaf43d036ca89ed21cf2bf68f09236de82fda4740dd27_s390x",
          "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:5e413617445a6f5b238d5b45dae157df63c974b5a0262bce8754cdd3296f86a3_arm64",
          "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:a2dd47734aa704b52c3ff8c9101c8309ea5647abf5d0b6d5a4e38627270f3d61_ppc64le",
          "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:a6fc33e05610c80a5f2be7589394eaf9ea7e85568d001c601a214535df7e9a85_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59888"
        },
        {
          "category": "external",
          "summary": "RHBZ#2500096",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500096"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59888",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59888"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59888",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59888"
        },
        {
          "category": "external",
          "summary": "https://github.com/FasterXML/jackson-databind/commit/baa2cdf5ca2b2717fbb88d91955d69d8651df3e4",
          "url": "https://github.com/FasterXML/jackson-databind/commit/baa2cdf5ca2b2717fbb88d91955d69d8651df3e4"
        },
        {
          "category": "external",
          "summary": "https://github.com/FasterXML/jackson-databind/commit/c7c678360624da5bc7eed2152789fa522880db9d",
          "url": "https://github.com/FasterXML/jackson-databind/commit/c7c678360624da5bc7eed2152789fa522880db9d"
        },
        {
          "category": "external",
          "summary": "https://github.com/FasterXML/jackson-databind/pull/5974",
          "url": "https://github.com/FasterXML/jackson-databind/pull/5974"
        },
        {
          "category": "external",
          "summary": "https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-3pjw-73gf-8qr5",
          "url": "https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-3pjw-73gf-8qr5"
        }
      ],
      "release_date": "2026-07-14T16:44:20.091000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-12T22:01:08+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:5281c5150f8c786098bbaf43d036ca89ed21cf2bf68f09236de82fda4740dd27_s390x",
            "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:5e413617445a6f5b238d5b45dae157df63c974b5a0262bce8754cdd3296f86a3_arm64",
            "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:a2dd47734aa704b52c3ff8c9101c8309ea5647abf5d0b6d5a4e38627270f3d61_ppc64le",
            "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:a6fc33e05610c80a5f2be7589394eaf9ea7e85568d001c601a214535df7e9a85_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:54440"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:5281c5150f8c786098bbaf43d036ca89ed21cf2bf68f09236de82fda4740dd27_s390x",
            "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:5e413617445a6f5b238d5b45dae157df63c974b5a0262bce8754cdd3296f86a3_arm64",
            "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:a2dd47734aa704b52c3ff8c9101c8309ea5647abf5d0b6d5a4e38627270f3d61_ppc64le",
            "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:a6fc33e05610c80a5f2be7589394eaf9ea7e85568d001c601a214535df7e9a85_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: @JsonIgnore bypass in Java Records"
    },
    {
      "cve": "CVE-2026-68494",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-08-04T15:01:53.631865+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2511026"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in jackson-core. A remote attacker can exploit an incomplete fix in the non-blocking JSON parser by streaming specially crafted JSON data in small chunks. This bypasses the intended number length constraint, causing the parser to accumulate excessive memory per connection. This uncontrolled memory growth can lead to a denial of service (DoS) by exhausting the Java Virtual Machine (JVM) heap.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "com.fasterxml.jackson.core/jackson-core: tools.jackson.core/jackson-core: jackson-core: Denial of Service via incomplete fix in async JSON parser",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in `jackson-core`\u0027s asynchronous JSON parser. A remote, unauthenticated attacker can exploit an incomplete fix to bypass number length constraints, leading to unbounded memory accumulation and potential JVM heap exhaustion in reactive frameworks processing chunked JSON input.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:5281c5150f8c786098bbaf43d036ca89ed21cf2bf68f09236de82fda4740dd27_s390x",
          "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:5e413617445a6f5b238d5b45dae157df63c974b5a0262bce8754cdd3296f86a3_arm64",
          "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:a2dd47734aa704b52c3ff8c9101c8309ea5647abf5d0b6d5a4e38627270f3d61_ppc64le",
          "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:a6fc33e05610c80a5f2be7589394eaf9ea7e85568d001c601a214535df7e9a85_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-68494"
        },
        {
          "category": "external",
          "summary": "RHBZ#2511026",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2511026"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-68494",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-68494"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-68494",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68494"
        },
        {
          "category": "external",
          "summary": "https://github.com/FasterXML/jackson-core/commit/050b429804dce2a7e08f0be1b0b4c3d040fdb9cd",
          "url": "https://github.com/FasterXML/jackson-core/commit/050b429804dce2a7e08f0be1b0b4c3d040fdb9cd"
        },
        {
          "category": "external",
          "summary": "https://github.com/FasterXML/jackson-core/commit/4cdd529749da396cc7edf6d4a2aad41d47902641",
          "url": "https://github.com/FasterXML/jackson-core/commit/4cdd529749da396cc7edf6d4a2aad41d47902641"
        },
        {
          "category": "external",
          "summary": "https://github.com/FasterXML/jackson-core/commit/c5941e5aae7fd5aeac55d66933cfb82b9aabeef8",
          "url": "https://github.com/FasterXML/jackson-core/commit/c5941e5aae7fd5aeac55d66933cfb82b9aabeef8"
        },
        {
          "category": "external",
          "summary": "https://github.com/FasterXML/jackson-core/pull/1611",
          "url": "https://github.com/FasterXML/jackson-core/pull/1611"
        },
        {
          "category": "external",
          "summary": "https://github.com/FasterXML/jackson-core/security/advisories/GHSA-r7wm-3cxj-wff9",
          "url": "https://github.com/FasterXML/jackson-core/security/advisories/GHSA-r7wm-3cxj-wff9"
        },
        {
          "category": "external",
          "summary": "https://github.com/advisories/GHSA-72hv-8253-57qq",
          "url": "https://github.com/advisories/GHSA-72hv-8253-57qq"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-18401",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-18401"
        }
      ],
      "release_date": "2026-08-04T14:39:14.471000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-12T22:01:08+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:5281c5150f8c786098bbaf43d036ca89ed21cf2bf68f09236de82fda4740dd27_s390x",
            "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:5e413617445a6f5b238d5b45dae157df63c974b5a0262bce8754cdd3296f86a3_arm64",
            "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:a2dd47734aa704b52c3ff8c9101c8309ea5647abf5d0b6d5a4e38627270f3d61_ppc64le",
            "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:a6fc33e05610c80a5f2be7589394eaf9ea7e85568d001c601a214535df7e9a85_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:54440"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:5281c5150f8c786098bbaf43d036ca89ed21cf2bf68f09236de82fda4740dd27_s390x",
            "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:5e413617445a6f5b238d5b45dae157df63c974b5a0262bce8754cdd3296f86a3_arm64",
            "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:a2dd47734aa704b52c3ff8c9101c8309ea5647abf5d0b6d5a4e38627270f3d61_ppc64le",
            "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0:registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:a6fc33e05610c80a5f2be7589394eaf9ea7e85568d001c601a214535df7e9a85_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "com.fasterxml.jackson.core/jackson-core: tools.jackson.core/jackson-core: jackson-core: Denial of Service via incomplete fix in async JSON parser"
    }
  ]
}