RHSA-2026:62115

Vulnerability from csaf_redhat - Published: 2026-09-01 13:31 - Updated: 2026-09-01 19:19
Summary
Red Hat Security Advisory: Red Hat Ceph Storage
Severity
Important
Notes
Topic: A new version of Red Hat build of Ceph Storage has been released
Details: The Red Hat Storage Ceph container images are based on the latest ubi9 base image and Ceph 8.1. This release updates to the latest version.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
CVE-2019-10790

taffydb npm module, vulnerable in all versions up to and including 2.7.3, allows attackers to forge adding additional properties into user-input processed by taffy which can allow access to any data items in the DB. taffy sets an internal index for each data item in its DB. However, it is found that the internal index can be forged by adding additional properties into user-input. If index is found in the query, taffyDB will ignore other query conditions and directly return the indexed data item. Moreover, the internal index is in an easily-guessable format (e.g., T000002R000001). As such, attackers can use this vulnerability to access any data items in the DB.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
Product Identifier Version Remediation
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:070f43995aae0152eac7d228ae7d4d005eb57e06e14aef1b50d4db64341b826a_arm64 —
Vendor Fix fix
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:6c084d7b7609111b8c28d22a7e69d2093607e9a648b7fb7259bcf5693ca35875_amd64 —
Vendor Fix fix
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:b36874b30b49a770f223a34034ae128a1a02fe0dfdb16cea5432ed67a24728af_ppc64le —
Vendor Fix fix
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:decb2f66e30c9500882c35f898e7da4e4d2ee31a7421b9dcab736350c7a5a771_s390x —
Vendor Fix fix
Product Identifier Version Remediation
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:044d55095e592d054a5ec69603c1fd8886ea3efcedfd95945dbef3596c9835d5_arm64 —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9b426d409203a3366689db14f15b0d8639d231945678184c3b43869d56705dbd_ppc64le —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:a1642617a4fc8ff1b79299b160b0f644eeafeb4809981a9d00a3e621ec8bb096_amd64 —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:bbb4f2499a816032af66bb8b022d8a51198a5db01ee39714800340cbd4a45d40_s390x —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:39cf934468566964e44ddac65928d837528d126d16d5ad6d71298c0570b0066d_ppc64le —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3d2d10adc4f85192a3729477777b068366b5178512724d3ffd6c498ba577d847_amd64 —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:8aac763313e46322e3d0fbb3fbed767228906f75865d54eb753f03f027408926_arm64 —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:cbd32c0b082f368583eeff3657a97a79a11ccb5d3bcf5663dd8738d09a0d53e8_s390x —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3a7dedb1b1fee0c80dcfe0f3ebce6e20aa6a364fe66808458f5416ae09890c56_s390x —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3d4665881548c0808fea1612a972c732c5f2b928ad49fbb8025ceb7f410faabb_amd64 —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:765efce53826bcdd18c41186fb1fa291e9b1450c43706747d2be1dd5addda19a_ppc64le —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:79bd982b6824100b974103347eaaa7f34c60f4b1118c93d7e628bafb11945a17_arm64 —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3c1bbf300b5bd123493c57ffe84ca24bf14fcf32b648cc8c279ad3a3101c19c8_ppc64le —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7256c524d36f6128bffc8fdeec7e9ec435d43ceb57afd1512e496f85a09376f9_s390x —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7e7b6ea0214c616e7ef462152854207afe84732c54150914fa6180d8cc29a4ad_amd64 —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:ed001e7318e45d7c0372b966a8c447eddf75d1079b1b937872c2c12893389849_arm64 —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:4493b44fc1a487413d554826a92f82a44aca453e8c5d9c476ed47ef3efc1123a_ppc64le —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:63eed84d24f949baf09d2294dcc9849e72a6cbe6213844872efb9843898a132f_s390x —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:b0ba95a2611c37db8f149d5fe44f424f3ff696535f7e5ac5cbadd45837f864cb_amd64 —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:db068d24b3055fe96d2fa8703405eca07634238306159e3803ff4ae23f1024fd_arm64 —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:65f82ec0df5d07b18d73620b7823bf7a51f33c3f3c4c44b290d9cd5f79c8e64a_ppc64le —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:86d8a15cc12eaf34d01d077924301ee0276bc2b9539987b1133dc9b65609d660_s390x —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:b48486f663889cd57eead6f097d6cc26e6c2ff9bdfbb6f24b8d1f8d2e42a2b4c_arm64 —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:de99e5235ccf7714e7df2ef04b8c5c60c3efe04cacee13acfbaddaa60c5f88bf_amd64 —
Threats
Impact Important
CVE-2023-25153

A flaw was found in containerd. When importing an OCI image, there was no limit on the number of bytes read for certain files. A maliciously crafted image with a large file, where a limit was not applied could cause a denial of service.

5.5 (Medium)
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CWE-400 - Uncontrolled Resource Consumption
Affected products
Product Identifier Version Remediation
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:044d55095e592d054a5ec69603c1fd8886ea3efcedfd95945dbef3596c9835d5_arm64 —
Vendor Fix fix
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9b426d409203a3366689db14f15b0d8639d231945678184c3b43869d56705dbd_ppc64le —
Vendor Fix fix
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:a1642617a4fc8ff1b79299b160b0f644eeafeb4809981a9d00a3e621ec8bb096_amd64 —
Vendor Fix fix
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:bbb4f2499a816032af66bb8b022d8a51198a5db01ee39714800340cbd4a45d40_s390x —
Vendor Fix fix
Product Identifier Version Remediation
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:39cf934468566964e44ddac65928d837528d126d16d5ad6d71298c0570b0066d_ppc64le —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3d2d10adc4f85192a3729477777b068366b5178512724d3ffd6c498ba577d847_amd64 —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:8aac763313e46322e3d0fbb3fbed767228906f75865d54eb753f03f027408926_arm64 —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:cbd32c0b082f368583eeff3657a97a79a11ccb5d3bcf5663dd8738d09a0d53e8_s390x —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3a7dedb1b1fee0c80dcfe0f3ebce6e20aa6a364fe66808458f5416ae09890c56_s390x —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3d4665881548c0808fea1612a972c732c5f2b928ad49fbb8025ceb7f410faabb_amd64 —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:765efce53826bcdd18c41186fb1fa291e9b1450c43706747d2be1dd5addda19a_ppc64le —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:79bd982b6824100b974103347eaaa7f34c60f4b1118c93d7e628bafb11945a17_arm64 —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:070f43995aae0152eac7d228ae7d4d005eb57e06e14aef1b50d4db64341b826a_arm64 —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:6c084d7b7609111b8c28d22a7e69d2093607e9a648b7fb7259bcf5693ca35875_amd64 —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:b36874b30b49a770f223a34034ae128a1a02fe0dfdb16cea5432ed67a24728af_ppc64le —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:decb2f66e30c9500882c35f898e7da4e4d2ee31a7421b9dcab736350c7a5a771_s390x —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3c1bbf300b5bd123493c57ffe84ca24bf14fcf32b648cc8c279ad3a3101c19c8_ppc64le —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7256c524d36f6128bffc8fdeec7e9ec435d43ceb57afd1512e496f85a09376f9_s390x —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7e7b6ea0214c616e7ef462152854207afe84732c54150914fa6180d8cc29a4ad_amd64 —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:ed001e7318e45d7c0372b966a8c447eddf75d1079b1b937872c2c12893389849_arm64 —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:4493b44fc1a487413d554826a92f82a44aca453e8c5d9c476ed47ef3efc1123a_ppc64le —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:63eed84d24f949baf09d2294dcc9849e72a6cbe6213844872efb9843898a132f_s390x —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:b0ba95a2611c37db8f149d5fe44f424f3ff696535f7e5ac5cbadd45837f864cb_amd64 —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:db068d24b3055fe96d2fa8703405eca07634238306159e3803ff4ae23f1024fd_arm64 —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:65f82ec0df5d07b18d73620b7823bf7a51f33c3f3c4c44b290d9cd5f79c8e64a_ppc64le —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:86d8a15cc12eaf34d01d077924301ee0276bc2b9539987b1133dc9b65609d660_s390x —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:b48486f663889cd57eead6f097d6cc26e6c2ff9bdfbb6f24b8d1f8d2e42a2b4c_arm64 —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:de99e5235ccf7714e7df2ef04b8c5c60c3efe04cacee13acfbaddaa60c5f88bf_amd64 —
Threats
Impact Moderate
CVE-2023-28155

The Request package through 2.88.1 for Node.js allows a bypass of SSRF mitigations via an attacker-controller server that does a cross-protocol redirect (HTTP to HTTPS, or HTTPS to HTTP).

6.1 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CWE-918 - Server-Side Request Forgery (SSRF)
Affected products
Product Identifier Version Remediation
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:070f43995aae0152eac7d228ae7d4d005eb57e06e14aef1b50d4db64341b826a_arm64 —
Vendor Fix fix
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:6c084d7b7609111b8c28d22a7e69d2093607e9a648b7fb7259bcf5693ca35875_amd64 —
Vendor Fix fix
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:b36874b30b49a770f223a34034ae128a1a02fe0dfdb16cea5432ed67a24728af_ppc64le —
Vendor Fix fix
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:decb2f66e30c9500882c35f898e7da4e4d2ee31a7421b9dcab736350c7a5a771_s390x —
Vendor Fix fix
Product Identifier Version Remediation
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:044d55095e592d054a5ec69603c1fd8886ea3efcedfd95945dbef3596c9835d5_arm64 —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9b426d409203a3366689db14f15b0d8639d231945678184c3b43869d56705dbd_ppc64le —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:a1642617a4fc8ff1b79299b160b0f644eeafeb4809981a9d00a3e621ec8bb096_amd64 —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:bbb4f2499a816032af66bb8b022d8a51198a5db01ee39714800340cbd4a45d40_s390x —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:39cf934468566964e44ddac65928d837528d126d16d5ad6d71298c0570b0066d_ppc64le —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3d2d10adc4f85192a3729477777b068366b5178512724d3ffd6c498ba577d847_amd64 —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:8aac763313e46322e3d0fbb3fbed767228906f75865d54eb753f03f027408926_arm64 —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:cbd32c0b082f368583eeff3657a97a79a11ccb5d3bcf5663dd8738d09a0d53e8_s390x —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3a7dedb1b1fee0c80dcfe0f3ebce6e20aa6a364fe66808458f5416ae09890c56_s390x —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3d4665881548c0808fea1612a972c732c5f2b928ad49fbb8025ceb7f410faabb_amd64 —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:765efce53826bcdd18c41186fb1fa291e9b1450c43706747d2be1dd5addda19a_ppc64le —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:79bd982b6824100b974103347eaaa7f34c60f4b1118c93d7e628bafb11945a17_arm64 —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3c1bbf300b5bd123493c57ffe84ca24bf14fcf32b648cc8c279ad3a3101c19c8_ppc64le —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7256c524d36f6128bffc8fdeec7e9ec435d43ceb57afd1512e496f85a09376f9_s390x —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7e7b6ea0214c616e7ef462152854207afe84732c54150914fa6180d8cc29a4ad_amd64 —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:ed001e7318e45d7c0372b966a8c447eddf75d1079b1b937872c2c12893389849_arm64 —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:4493b44fc1a487413d554826a92f82a44aca453e8c5d9c476ed47ef3efc1123a_ppc64le —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:63eed84d24f949baf09d2294dcc9849e72a6cbe6213844872efb9843898a132f_s390x —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:b0ba95a2611c37db8f149d5fe44f424f3ff696535f7e5ac5cbadd45837f864cb_amd64 —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:db068d24b3055fe96d2fa8703405eca07634238306159e3803ff4ae23f1024fd_arm64 —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:65f82ec0df5d07b18d73620b7823bf7a51f33c3f3c4c44b290d9cd5f79c8e64a_ppc64le —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:86d8a15cc12eaf34d01d077924301ee0276bc2b9539987b1133dc9b65609d660_s390x —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:b48486f663889cd57eead6f097d6cc26e6c2ff9bdfbb6f24b8d1f8d2e42a2b4c_arm64 —
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:de99e5235ccf7714e7df2ef04b8c5c60c3efe04cacee13acfbaddaa60c5f88bf_amd64 —
Threats
Impact Moderate
CVE-2024-11831

A flaw was found in npm-serialize-javascript. The vulnerability occurs because the serialize-javascript module does not properly sanitize certain inputs, such as regex or other JavaScript object types, allowing an attacker to inject malicious code. This code could be executed when deserialized by a web browser, causing Cross-site scripting (XSS) attacks. This issue is critical in environments where serialized data is sent to web clients, potentially compromising the security of the website or web application using this package.

5.4 (Medium)
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products
Product Identifier Version Remediation
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:070f43995aae0152eac7d228ae7d4d005eb57e06e14aef1b50d4db64341b826a_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:6c084d7b7609111b8c28d22a7e69d2093607e9a648b7fb7259bcf5693ca35875_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:b36874b30b49a770f223a34034ae128a1a02fe0dfdb16cea5432ed67a24728af_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:decb2f66e30c9500882c35f898e7da4e4d2ee31a7421b9dcab736350c7a5a771_s390x —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:044d55095e592d054a5ec69603c1fd8886ea3efcedfd95945dbef3596c9835d5_arm64 —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9b426d409203a3366689db14f15b0d8639d231945678184c3b43869d56705dbd_ppc64le —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:a1642617a4fc8ff1b79299b160b0f644eeafeb4809981a9d00a3e621ec8bb096_amd64 —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:bbb4f2499a816032af66bb8b022d8a51198a5db01ee39714800340cbd4a45d40_s390x —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:39cf934468566964e44ddac65928d837528d126d16d5ad6d71298c0570b0066d_ppc64le —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3d2d10adc4f85192a3729477777b068366b5178512724d3ffd6c498ba577d847_amd64 —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:8aac763313e46322e3d0fbb3fbed767228906f75865d54eb753f03f027408926_arm64 —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:cbd32c0b082f368583eeff3657a97a79a11ccb5d3bcf5663dd8738d09a0d53e8_s390x —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3a7dedb1b1fee0c80dcfe0f3ebce6e20aa6a364fe66808458f5416ae09890c56_s390x —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3d4665881548c0808fea1612a972c732c5f2b928ad49fbb8025ceb7f410faabb_amd64 —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:765efce53826bcdd18c41186fb1fa291e9b1450c43706747d2be1dd5addda19a_ppc64le —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:79bd982b6824100b974103347eaaa7f34c60f4b1118c93d7e628bafb11945a17_arm64 —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3c1bbf300b5bd123493c57ffe84ca24bf14fcf32b648cc8c279ad3a3101c19c8_ppc64le —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7256c524d36f6128bffc8fdeec7e9ec435d43ceb57afd1512e496f85a09376f9_s390x —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7e7b6ea0214c616e7ef462152854207afe84732c54150914fa6180d8cc29a4ad_amd64 —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:ed001e7318e45d7c0372b966a8c447eddf75d1079b1b937872c2c12893389849_arm64 —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:4493b44fc1a487413d554826a92f82a44aca453e8c5d9c476ed47ef3efc1123a_ppc64le —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:63eed84d24f949baf09d2294dcc9849e72a6cbe6213844872efb9843898a132f_s390x —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:b0ba95a2611c37db8f149d5fe44f424f3ff696535f7e5ac5cbadd45837f864cb_amd64 —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:db068d24b3055fe96d2fa8703405eca07634238306159e3803ff4ae23f1024fd_arm64 —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:65f82ec0df5d07b18d73620b7823bf7a51f33c3f3c4c44b290d9cd5f79c8e64a_ppc64le —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:86d8a15cc12eaf34d01d077924301ee0276bc2b9539987b1133dc9b65609d660_s390x —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:b48486f663889cd57eead6f097d6cc26e6c2ff9bdfbb6f24b8d1f8d2e42a2b4c_arm64 —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:de99e5235ccf7714e7df2ef04b8c5c60c3efe04cacee13acfbaddaa60c5f88bf_amd64 —
Workaround
Threats
Impact Moderate
CVE-2025-50181

A flaw was found in urllib3. The `PoolManager` class allows redirects to be disabled by configuring retries in a specific manner, effectively bypassing intended HTTP redirection behavior. A network attacker can leverage this configuration to manipulate request flows and disrupt service. This bypass occurs through improper handling of retry parameters during PoolManager instantiation. This issue can reult in a denial of service or unintended data exposure due to altered request destinations.

5.3 (Medium)
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
CWE-601 - URL Redirection to Untrusted Site ('Open Redirect')
Affected products
Product Identifier Version Remediation
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:044d55095e592d054a5ec69603c1fd8886ea3efcedfd95945dbef3596c9835d5_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9b426d409203a3366689db14f15b0d8639d231945678184c3b43869d56705dbd_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:a1642617a4fc8ff1b79299b160b0f644eeafeb4809981a9d00a3e621ec8bb096_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:bbb4f2499a816032af66bb8b022d8a51198a5db01ee39714800340cbd4a45d40_s390x —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:39cf934468566964e44ddac65928d837528d126d16d5ad6d71298c0570b0066d_ppc64le —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3d2d10adc4f85192a3729477777b068366b5178512724d3ffd6c498ba577d847_amd64 —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:8aac763313e46322e3d0fbb3fbed767228906f75865d54eb753f03f027408926_arm64 —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:cbd32c0b082f368583eeff3657a97a79a11ccb5d3bcf5663dd8738d09a0d53e8_s390x —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3a7dedb1b1fee0c80dcfe0f3ebce6e20aa6a364fe66808458f5416ae09890c56_s390x —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3d4665881548c0808fea1612a972c732c5f2b928ad49fbb8025ceb7f410faabb_amd64 —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:765efce53826bcdd18c41186fb1fa291e9b1450c43706747d2be1dd5addda19a_ppc64le —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:79bd982b6824100b974103347eaaa7f34c60f4b1118c93d7e628bafb11945a17_arm64 —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:070f43995aae0152eac7d228ae7d4d005eb57e06e14aef1b50d4db64341b826a_arm64 —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:6c084d7b7609111b8c28d22a7e69d2093607e9a648b7fb7259bcf5693ca35875_amd64 —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:b36874b30b49a770f223a34034ae128a1a02fe0dfdb16cea5432ed67a24728af_ppc64le —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:decb2f66e30c9500882c35f898e7da4e4d2ee31a7421b9dcab736350c7a5a771_s390x —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3c1bbf300b5bd123493c57ffe84ca24bf14fcf32b648cc8c279ad3a3101c19c8_ppc64le —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7256c524d36f6128bffc8fdeec7e9ec435d43ceb57afd1512e496f85a09376f9_s390x —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7e7b6ea0214c616e7ef462152854207afe84732c54150914fa6180d8cc29a4ad_amd64 —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:ed001e7318e45d7c0372b966a8c447eddf75d1079b1b937872c2c12893389849_arm64 —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:4493b44fc1a487413d554826a92f82a44aca453e8c5d9c476ed47ef3efc1123a_ppc64le —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:63eed84d24f949baf09d2294dcc9849e72a6cbe6213844872efb9843898a132f_s390x —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:b0ba95a2611c37db8f149d5fe44f424f3ff696535f7e5ac5cbadd45837f864cb_amd64 —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:db068d24b3055fe96d2fa8703405eca07634238306159e3803ff4ae23f1024fd_arm64 —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:65f82ec0df5d07b18d73620b7823bf7a51f33c3f3c4c44b290d9cd5f79c8e64a_ppc64le —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:86d8a15cc12eaf34d01d077924301ee0276bc2b9539987b1133dc9b65609d660_s390x —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:b48486f663889cd57eead6f097d6cc26e6c2ff9bdfbb6f24b8d1f8d2e42a2b4c_arm64 —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:de99e5235ccf7714e7df2ef04b8c5c60c3efe04cacee13acfbaddaa60c5f88bf_amd64 —
Workaround
Threats
Impact Moderate
CVE-2025-50182

A flaw was found in urllib3. The library fails to properly validate redirect URLs, allowing an attacker to manipulate redirect chains when used in environments like Pyodide utilizing the JavaScript Fetch API. This lack of validation can enable a remote attacker to control the redirect destination, leading to arbitrary URL redirection. Consequently, an attacker can redirect users to malicious websites. This vulnerability stems from a failure to constrain the redirect target.

5.3 (Medium)
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
CWE-601 - URL Redirection to Untrusted Site ('Open Redirect')
Affected products
Product Identifier Version Remediation
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:044d55095e592d054a5ec69603c1fd8886ea3efcedfd95945dbef3596c9835d5_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9b426d409203a3366689db14f15b0d8639d231945678184c3b43869d56705dbd_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:a1642617a4fc8ff1b79299b160b0f644eeafeb4809981a9d00a3e621ec8bb096_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:bbb4f2499a816032af66bb8b022d8a51198a5db01ee39714800340cbd4a45d40_s390x —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:39cf934468566964e44ddac65928d837528d126d16d5ad6d71298c0570b0066d_ppc64le —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3d2d10adc4f85192a3729477777b068366b5178512724d3ffd6c498ba577d847_amd64 —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:8aac763313e46322e3d0fbb3fbed767228906f75865d54eb753f03f027408926_arm64 —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:cbd32c0b082f368583eeff3657a97a79a11ccb5d3bcf5663dd8738d09a0d53e8_s390x —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3a7dedb1b1fee0c80dcfe0f3ebce6e20aa6a364fe66808458f5416ae09890c56_s390x —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3d4665881548c0808fea1612a972c732c5f2b928ad49fbb8025ceb7f410faabb_amd64 —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:765efce53826bcdd18c41186fb1fa291e9b1450c43706747d2be1dd5addda19a_ppc64le —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:79bd982b6824100b974103347eaaa7f34c60f4b1118c93d7e628bafb11945a17_arm64 —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:070f43995aae0152eac7d228ae7d4d005eb57e06e14aef1b50d4db64341b826a_arm64 —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:6c084d7b7609111b8c28d22a7e69d2093607e9a648b7fb7259bcf5693ca35875_amd64 —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:b36874b30b49a770f223a34034ae128a1a02fe0dfdb16cea5432ed67a24728af_ppc64le —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:decb2f66e30c9500882c35f898e7da4e4d2ee31a7421b9dcab736350c7a5a771_s390x —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3c1bbf300b5bd123493c57ffe84ca24bf14fcf32b648cc8c279ad3a3101c19c8_ppc64le —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7256c524d36f6128bffc8fdeec7e9ec435d43ceb57afd1512e496f85a09376f9_s390x —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7e7b6ea0214c616e7ef462152854207afe84732c54150914fa6180d8cc29a4ad_amd64 —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:ed001e7318e45d7c0372b966a8c447eddf75d1079b1b937872c2c12893389849_arm64 —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:4493b44fc1a487413d554826a92f82a44aca453e8c5d9c476ed47ef3efc1123a_ppc64le —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:63eed84d24f949baf09d2294dcc9849e72a6cbe6213844872efb9843898a132f_s390x —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:b0ba95a2611c37db8f149d5fe44f424f3ff696535f7e5ac5cbadd45837f864cb_amd64 —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:db068d24b3055fe96d2fa8703405eca07634238306159e3803ff4ae23f1024fd_arm64 —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:65f82ec0df5d07b18d73620b7823bf7a51f33c3f3c4c44b290d9cd5f79c8e64a_ppc64le —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:86d8a15cc12eaf34d01d077924301ee0276bc2b9539987b1133dc9b65609d660_s390x —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:b48486f663889cd57eead6f097d6cc26e6c2ff9bdfbb6f24b8d1f8d2e42a2b4c_arm64 —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:de99e5235ccf7714e7df2ef04b8c5c60c3efe04cacee13acfbaddaa60c5f88bf_amd64 —
Workaround
Threats
Impact Moderate
CVE-2025-59436

A potential SSRF vector has been discovered in the node ip package (ip on npm). The issue is that the value `0` is improperly categorized as globally routable via the isPublic function.

3.2 (Low)
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N
CWE-918 - Server-Side Request Forgery (SSRF)
Affected products
Product Identifier Version Remediation
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:070f43995aae0152eac7d228ae7d4d005eb57e06e14aef1b50d4db64341b826a_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:6c084d7b7609111b8c28d22a7e69d2093607e9a648b7fb7259bcf5693ca35875_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:b36874b30b49a770f223a34034ae128a1a02fe0dfdb16cea5432ed67a24728af_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:decb2f66e30c9500882c35f898e7da4e4d2ee31a7421b9dcab736350c7a5a771_s390x —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:044d55095e592d054a5ec69603c1fd8886ea3efcedfd95945dbef3596c9835d5_arm64 —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9b426d409203a3366689db14f15b0d8639d231945678184c3b43869d56705dbd_ppc64le —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:a1642617a4fc8ff1b79299b160b0f644eeafeb4809981a9d00a3e621ec8bb096_amd64 —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:bbb4f2499a816032af66bb8b022d8a51198a5db01ee39714800340cbd4a45d40_s390x —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:39cf934468566964e44ddac65928d837528d126d16d5ad6d71298c0570b0066d_ppc64le —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3d2d10adc4f85192a3729477777b068366b5178512724d3ffd6c498ba577d847_amd64 —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:8aac763313e46322e3d0fbb3fbed767228906f75865d54eb753f03f027408926_arm64 —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:cbd32c0b082f368583eeff3657a97a79a11ccb5d3bcf5663dd8738d09a0d53e8_s390x —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3a7dedb1b1fee0c80dcfe0f3ebce6e20aa6a364fe66808458f5416ae09890c56_s390x —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3d4665881548c0808fea1612a972c732c5f2b928ad49fbb8025ceb7f410faabb_amd64 —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:765efce53826bcdd18c41186fb1fa291e9b1450c43706747d2be1dd5addda19a_ppc64le —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:79bd982b6824100b974103347eaaa7f34c60f4b1118c93d7e628bafb11945a17_arm64 —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3c1bbf300b5bd123493c57ffe84ca24bf14fcf32b648cc8c279ad3a3101c19c8_ppc64le —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7256c524d36f6128bffc8fdeec7e9ec435d43ceb57afd1512e496f85a09376f9_s390x —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7e7b6ea0214c616e7ef462152854207afe84732c54150914fa6180d8cc29a4ad_amd64 —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:ed001e7318e45d7c0372b966a8c447eddf75d1079b1b937872c2c12893389849_arm64 —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:4493b44fc1a487413d554826a92f82a44aca453e8c5d9c476ed47ef3efc1123a_ppc64le —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:63eed84d24f949baf09d2294dcc9849e72a6cbe6213844872efb9843898a132f_s390x —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:b0ba95a2611c37db8f149d5fe44f424f3ff696535f7e5ac5cbadd45837f864cb_amd64 —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:db068d24b3055fe96d2fa8703405eca07634238306159e3803ff4ae23f1024fd_arm64 —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:65f82ec0df5d07b18d73620b7823bf7a51f33c3f3c4c44b290d9cd5f79c8e64a_ppc64le —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:86d8a15cc12eaf34d01d077924301ee0276bc2b9539987b1133dc9b65609d660_s390x —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:b48486f663889cd57eead6f097d6cc26e6c2ff9bdfbb6f24b8d1f8d2e42a2b4c_arm64 —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:de99e5235ccf7714e7df2ef04b8c5c60c3efe04cacee13acfbaddaa60c5f88bf_amd64 —
Workaround
Threats
Impact Low
CVE-2025-66418

A flaw was found in urllib3 Python library that could lead to a Denial of Service condition. A remote, malicious server can exploit this flaw by responding to a client request with an HTTP message that uses an excessive number of chained compression algorithms. This unlimited decompression chain causes the client system to consume a virtually unbounded amount of CPU resources and memory. The high resource usage leads to service disruption, making the application unresponsive.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Product Identifier Version Remediation
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:044d55095e592d054a5ec69603c1fd8886ea3efcedfd95945dbef3596c9835d5_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9b426d409203a3366689db14f15b0d8639d231945678184c3b43869d56705dbd_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:a1642617a4fc8ff1b79299b160b0f644eeafeb4809981a9d00a3e621ec8bb096_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:bbb4f2499a816032af66bb8b022d8a51198a5db01ee39714800340cbd4a45d40_s390x —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:39cf934468566964e44ddac65928d837528d126d16d5ad6d71298c0570b0066d_ppc64le —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3d2d10adc4f85192a3729477777b068366b5178512724d3ffd6c498ba577d847_amd64 —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:8aac763313e46322e3d0fbb3fbed767228906f75865d54eb753f03f027408926_arm64 —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:cbd32c0b082f368583eeff3657a97a79a11ccb5d3bcf5663dd8738d09a0d53e8_s390x —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3a7dedb1b1fee0c80dcfe0f3ebce6e20aa6a364fe66808458f5416ae09890c56_s390x —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3d4665881548c0808fea1612a972c732c5f2b928ad49fbb8025ceb7f410faabb_amd64 —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:765efce53826bcdd18c41186fb1fa291e9b1450c43706747d2be1dd5addda19a_ppc64le —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:79bd982b6824100b974103347eaaa7f34c60f4b1118c93d7e628bafb11945a17_arm64 —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:070f43995aae0152eac7d228ae7d4d005eb57e06e14aef1b50d4db64341b826a_arm64 —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:6c084d7b7609111b8c28d22a7e69d2093607e9a648b7fb7259bcf5693ca35875_amd64 —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:b36874b30b49a770f223a34034ae128a1a02fe0dfdb16cea5432ed67a24728af_ppc64le —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:decb2f66e30c9500882c35f898e7da4e4d2ee31a7421b9dcab736350c7a5a771_s390x —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3c1bbf300b5bd123493c57ffe84ca24bf14fcf32b648cc8c279ad3a3101c19c8_ppc64le —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7256c524d36f6128bffc8fdeec7e9ec435d43ceb57afd1512e496f85a09376f9_s390x —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7e7b6ea0214c616e7ef462152854207afe84732c54150914fa6180d8cc29a4ad_amd64 —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:ed001e7318e45d7c0372b966a8c447eddf75d1079b1b937872c2c12893389849_arm64 —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:4493b44fc1a487413d554826a92f82a44aca453e8c5d9c476ed47ef3efc1123a_ppc64le —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:63eed84d24f949baf09d2294dcc9849e72a6cbe6213844872efb9843898a132f_s390x —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:b0ba95a2611c37db8f149d5fe44f424f3ff696535f7e5ac5cbadd45837f864cb_amd64 —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:db068d24b3055fe96d2fa8703405eca07634238306159e3803ff4ae23f1024fd_arm64 —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:65f82ec0df5d07b18d73620b7823bf7a51f33c3f3c4c44b290d9cd5f79c8e64a_ppc64le —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:86d8a15cc12eaf34d01d077924301ee0276bc2b9539987b1133dc9b65609d660_s390x —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:b48486f663889cd57eead6f097d6cc26e6c2ff9bdfbb6f24b8d1f8d2e42a2b4c_arm64 —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:de99e5235ccf7714e7df2ef04b8c5c60c3efe04cacee13acfbaddaa60c5f88bf_amd64 —
Workaround
Threats
Impact Important
CVE-2026-24049

A path traversal flaw has been discovered in the python wheel too. The unpack function is vulnerable to file permission modification through mishandling of file permissions after extraction. The logic blindly trusts the filename from the archive header for the chmod operation, even though the extraction process itself might have sanitized the path. Attackers can craft a malicious wheel file that, when unpacked, changes the permissions of critical system files (e.g., /etc/passwd, SSH keys, config files), allowing for Privilege Escalation or arbitrary code execution by modifying now-writable scripts.

7.1 (High)
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products
Product Identifier Version Remediation
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:070f43995aae0152eac7d228ae7d4d005eb57e06e14aef1b50d4db64341b826a_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:6c084d7b7609111b8c28d22a7e69d2093607e9a648b7fb7259bcf5693ca35875_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:b36874b30b49a770f223a34034ae128a1a02fe0dfdb16cea5432ed67a24728af_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:decb2f66e30c9500882c35f898e7da4e4d2ee31a7421b9dcab736350c7a5a771_s390x —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:044d55095e592d054a5ec69603c1fd8886ea3efcedfd95945dbef3596c9835d5_arm64 —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9b426d409203a3366689db14f15b0d8639d231945678184c3b43869d56705dbd_ppc64le —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:a1642617a4fc8ff1b79299b160b0f644eeafeb4809981a9d00a3e621ec8bb096_amd64 —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:bbb4f2499a816032af66bb8b022d8a51198a5db01ee39714800340cbd4a45d40_s390x —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:39cf934468566964e44ddac65928d837528d126d16d5ad6d71298c0570b0066d_ppc64le —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3d2d10adc4f85192a3729477777b068366b5178512724d3ffd6c498ba577d847_amd64 —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:8aac763313e46322e3d0fbb3fbed767228906f75865d54eb753f03f027408926_arm64 —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:cbd32c0b082f368583eeff3657a97a79a11ccb5d3bcf5663dd8738d09a0d53e8_s390x —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3a7dedb1b1fee0c80dcfe0f3ebce6e20aa6a364fe66808458f5416ae09890c56_s390x —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3d4665881548c0808fea1612a972c732c5f2b928ad49fbb8025ceb7f410faabb_amd64 —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:765efce53826bcdd18c41186fb1fa291e9b1450c43706747d2be1dd5addda19a_ppc64le —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:79bd982b6824100b974103347eaaa7f34c60f4b1118c93d7e628bafb11945a17_arm64 —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3c1bbf300b5bd123493c57ffe84ca24bf14fcf32b648cc8c279ad3a3101c19c8_ppc64le —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7256c524d36f6128bffc8fdeec7e9ec435d43ceb57afd1512e496f85a09376f9_s390x —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7e7b6ea0214c616e7ef462152854207afe84732c54150914fa6180d8cc29a4ad_amd64 —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:ed001e7318e45d7c0372b966a8c447eddf75d1079b1b937872c2c12893389849_arm64 —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:4493b44fc1a487413d554826a92f82a44aca453e8c5d9c476ed47ef3efc1123a_ppc64le —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:63eed84d24f949baf09d2294dcc9849e72a6cbe6213844872efb9843898a132f_s390x —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:b0ba95a2611c37db8f149d5fe44f424f3ff696535f7e5ac5cbadd45837f864cb_amd64 —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:db068d24b3055fe96d2fa8703405eca07634238306159e3803ff4ae23f1024fd_arm64 —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:65f82ec0df5d07b18d73620b7823bf7a51f33c3f3c4c44b290d9cd5f79c8e64a_ppc64le —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:86d8a15cc12eaf34d01d077924301ee0276bc2b9539987b1133dc9b65609d660_s390x —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:b48486f663889cd57eead6f097d6cc26e6c2ff9bdfbb6f24b8d1f8d2e42a2b4c_arm64 —
Workaround
Unresolved product id: Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:de99e5235ccf7714e7df2ef04b8c5c60c3efe04cacee13acfbaddaa60c5f88bf_amd64 —
Workaround
Threats
Impact Important
References
URL Category
https://access.redhat.com/errata/RHSA-2026:62115 self
https://access.redhat.com/security/cve/CVE-2019-10790 external
https://access.redhat.com/security/cve/CVE-2023-25153 external
https://access.redhat.com/security/cve/CVE-2023-28155 external
https://access.redhat.com/security/cve/CVE-2024-11831 external
https://access.redhat.com/security/cve/CVE-2025-50181 external
https://access.redhat.com/security/cve/CVE-2025-50182 external
https://access.redhat.com/security/cve/CVE-2025-59436 external
https://access.redhat.com/security/cve/CVE-2025-66418 external
https://access.redhat.com/security/cve/CVE-2026-24049 external
https://access.redhat.com/security/updates/classi… external
https://docs.redhat.com/en/documentation/red_hat_… external
https://security.access.redhat.com/data/csaf/v2/a… self
https://access.redhat.com/security/cve/CVE-2019-10790 self
https://bugzilla.redhat.com/show_bug.cgi?id=2389970 external
https://www.cve.org/CVERecord?id=CVE-2019-10790 external
https://nvd.nist.gov/vuln/detail/CVE-2019-10790 external
https://security.snyk.io/vuln/SNYK-JS-TAFFYDB-2992450 external
https://snyk.io/vuln/SNYK-JS-TAFFY-546521 external
https://www.npmjs.com/package/taffy external
https://www.usenix.org/system/files/sec21-xiao.pdf external
https://access.redhat.com/security/cve/CVE-2023-25153 self
https://bugzilla.redhat.com/show_bug.cgi?id=2174473 external
https://www.cve.org/CVERecord?id=CVE-2023-25153 external
https://nvd.nist.gov/vuln/detail/CVE-2023-25153 external
https://github.com/containerd/containerd/commit/0… external
https://github.com/containerd/containerd/releases… external
https://github.com/containerd/containerd/releases… external
https://github.com/containerd/containerd/security… external
https://access.redhat.com/security/cve/CVE-2023-28155 self
https://bugzilla.redhat.com/show_bug.cgi?id=2389923 external
https://www.cve.org/CVERecord?id=CVE-2023-28155 external
https://nvd.nist.gov/vuln/detail/CVE-2023-28155 external
https://access.redhat.com/security/cve/CVE-2024-11831 self
https://bugzilla.redhat.com/show_bug.cgi?id=2312579 external
https://www.cve.org/CVERecord?id=CVE-2024-11831 external
https://nvd.nist.gov/vuln/detail/CVE-2024-11831 external
https://github.com/yahoo/serialize-javascript/com… external
https://github.com/yahoo/serialize-javascript/pull/173 external
https://access.redhat.com/security/cve/CVE-2025-50181 self
https://bugzilla.redhat.com/show_bug.cgi?id=2373799 external
https://www.cve.org/CVERecord?id=CVE-2025-50181 external
https://nvd.nist.gov/vuln/detail/CVE-2025-50181 external
https://github.com/urllib3/urllib3/commit/f05b132… external
https://github.com/urllib3/urllib3/security/advis… external
https://access.redhat.com/security/cve/CVE-2025-50182 self
https://bugzilla.redhat.com/show_bug.cgi?id=2373800 external
https://www.cve.org/CVERecord?id=CVE-2025-50182 external
https://nvd.nist.gov/vuln/detail/CVE-2025-50182 external
https://github.com/urllib3/urllib3/commit/7eb4a2a… external
https://github.com/urllib3/urllib3/security/advis… external
https://access.redhat.com/security/cve/CVE-2025-59436 self
https://bugzilla.redhat.com/show_bug.cgi?id=2395629 external
https://www.cve.org/CVERecord?id=CVE-2025-59436 external
https://nvd.nist.gov/vuln/detail/CVE-2025-59436 external
https://cosmosofcyberspace.github.io/CVE-Applicat… external
https://github.com/indutny/node-ip/issues/160 external
https://access.redhat.com/security/cve/CVE-2025-66418 self
https://bugzilla.redhat.com/show_bug.cgi?id=2419455 external
https://www.cve.org/CVERecord?id=CVE-2025-66418 external
https://nvd.nist.gov/vuln/detail/CVE-2025-66418 external
https://github.com/urllib3/urllib3/commit/24d7b67… external
https://github.com/urllib3/urllib3/security/advis… external
https://access.redhat.com/security/cve/CVE-2026-24049 self
https://bugzilla.redhat.com/show_bug.cgi?id=2431959 external
https://www.cve.org/CVERecord?id=CVE-2026-24049 external
https://nvd.nist.gov/vuln/detail/CVE-2026-24049 external
https://github.com/pypa/wheel/commit/7a7d2de96b22… external
https://github.com/pypa/wheel/releases/tag/0.46.2 external
https://github.com/pypa/wheel/security/advisories… external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "A new version of Red Hat build of Ceph Storage has been released",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The Red Hat Storage Ceph container images are based on the latest ubi9 base image and Ceph 8.1.\nThis release updates to the latest version.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:62115",
        "url": "https://access.redhat.com/errata/RHSA-2026:62115"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2019-10790",
        "url": "https://access.redhat.com/security/cve/CVE-2019-10790"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2023-25153",
        "url": "https://access.redhat.com/security/cve/CVE-2023-25153"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2023-28155",
        "url": "https://access.redhat.com/security/cve/CVE-2023-28155"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2024-11831",
        "url": "https://access.redhat.com/security/cve/CVE-2024-11831"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-50181",
        "url": "https://access.redhat.com/security/cve/CVE-2025-50181"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-50182",
        "url": "https://access.redhat.com/security/cve/CVE-2025-50182"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-59436",
        "url": "https://access.redhat.com/security/cve/CVE-2025-59436"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-66418",
        "url": "https://access.redhat.com/security/cve/CVE-2025-66418"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-24049",
        "url": "https://access.redhat.com/security/cve/CVE-2026-24049"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/red_hat_ceph_storage/",
        "url": "https://docs.redhat.com/en/documentation/red_hat_ceph_storage/"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_62115.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat Ceph Storage",
    "tracking": {
      "current_release_date": "2026-09-01T19:19:19+00:00",
      "generator": {
        "date": "2026-09-01T19:19:19+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.16"
        }
      },
      "id": "RHSA-2026:62115",
      "initial_release_date": "2026-09-01T13:31:31+00:00",
      "revision_history": [
        {
          "date": "2026-09-01T13:31:31+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-09-01T13:31:45+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-09-01T19:19:19+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Ceph Storage 8.1",
                "product": {
                  "name": "Red Hat Ceph Storage 8.1",
                  "product_id": "Red Hat Ceph Storage 8.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:ceph_storage:8.1::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Ceph Storage"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/grafana-rhel9@sha256:a1642617a4fc8ff1b79299b160b0f644eeafeb4809981a9d00a3e621ec8bb096_amd64",
                "product": {
                  "name": "registry.redhat.io/rhceph/grafana-rhel9@sha256:a1642617a4fc8ff1b79299b160b0f644eeafeb4809981a9d00a3e621ec8bb096_amd64",
                  "product_id": "registry.redhat.io/rhceph/grafana-rhel9@sha256:a1642617a4fc8ff1b79299b160b0f644eeafeb4809981a9d00a3e621ec8bb096_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/grafana-rhel9@sha256%3Aa1642617a4fc8ff1b79299b160b0f644eeafeb4809981a9d00a3e621ec8bb096?arch=amd64\u0026repository_url=registry.redhat.io/rhceph/grafana-rhel9\u0026tag=1787305054"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7e7b6ea0214c616e7ef462152854207afe84732c54150914fa6180d8cc29a4ad_amd64",
                "product": {
                  "name": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7e7b6ea0214c616e7ef462152854207afe84732c54150914fa6180d8cc29a4ad_amd64",
                  "product_id": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7e7b6ea0214c616e7ef462152854207afe84732c54150914fa6180d8cc29a4ad_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhceph-haproxy-rhel9@sha256%3A7e7b6ea0214c616e7ef462152854207afe84732c54150914fa6180d8cc29a4ad?arch=amd64\u0026repository_url=registry.redhat.io/rhceph/rhceph-haproxy-rhel9\u0026tag=1787304199"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:3d2d10adc4f85192a3729477777b068366b5178512724d3ffd6c498ba577d847_amd64",
                "product": {
                  "name": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:3d2d10adc4f85192a3729477777b068366b5178512724d3ffd6c498ba577d847_amd64",
                  "product_id": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:3d2d10adc4f85192a3729477777b068366b5178512724d3ffd6c498ba577d847_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keepalived-rhel9@sha256%3A3d2d10adc4f85192a3729477777b068366b5178512724d3ffd6c498ba577d847?arch=amd64\u0026repository_url=registry.redhat.io/rhceph/keepalived-rhel9\u0026tag=1787303659"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3d4665881548c0808fea1612a972c732c5f2b928ad49fbb8025ceb7f410faabb_amd64",
                "product": {
                  "name": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3d4665881548c0808fea1612a972c732c5f2b928ad49fbb8025ceb7f410faabb_amd64",
                  "product_id": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3d4665881548c0808fea1612a972c732c5f2b928ad49fbb8025ceb7f410faabb_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oauth2-proxy-rhel9@sha256%3A3d4665881548c0808fea1612a972c732c5f2b928ad49fbb8025ceb7f410faabb?arch=amd64\u0026repository_url=registry.redhat.io/rhceph/oauth2-proxy-rhel9\u0026tag=1787304106"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:b0ba95a2611c37db8f149d5fe44f424f3ff696535f7e5ac5cbadd45837f864cb_amd64",
                "product": {
                  "name": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:b0ba95a2611c37db8f149d5fe44f424f3ff696535f7e5ac5cbadd45837f864cb_amd64",
                  "product_id": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:b0ba95a2611c37db8f149d5fe44f424f3ff696535f7e5ac5cbadd45837f864cb_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhceph-promtail-rhel9@sha256%3Ab0ba95a2611c37db8f149d5fe44f424f3ff696535f7e5ac5cbadd45837f864cb?arch=amd64\u0026repository_url=registry.redhat.io/rhceph/rhceph-promtail-rhel9\u0026tag=1787304137"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:6c084d7b7609111b8c28d22a7e69d2093607e9a648b7fb7259bcf5693ca35875_amd64",
                "product": {
                  "name": "registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:6c084d7b7609111b8c28d22a7e69d2093607e9a648b7fb7259bcf5693ca35875_amd64",
                  "product_id": "registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:6c084d7b7609111b8c28d22a7e69d2093607e9a648b7fb7259bcf5693ca35875_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhceph-8-rhel9@sha256%3A6c084d7b7609111b8c28d22a7e69d2093607e9a648b7fb7259bcf5693ca35875?arch=amd64\u0026repository_url=registry.redhat.io/rhceph/rhceph-8-rhel9\u0026tag=1787550654"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:de99e5235ccf7714e7df2ef04b8c5c60c3efe04cacee13acfbaddaa60c5f88bf_amd64",
                "product": {
                  "name": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:de99e5235ccf7714e7df2ef04b8c5c60c3efe04cacee13acfbaddaa60c5f88bf_amd64",
                  "product_id": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:de99e5235ccf7714e7df2ef04b8c5c60c3efe04cacee13acfbaddaa60c5f88bf_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/snmp-notifier-rhel9@sha256%3Ade99e5235ccf7714e7df2ef04b8c5c60c3efe04cacee13acfbaddaa60c5f88bf?arch=amd64\u0026repository_url=registry.redhat.io/rhceph/snmp-notifier-rhel9\u0026tag=1787303640"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/grafana-rhel9@sha256:044d55095e592d054a5ec69603c1fd8886ea3efcedfd95945dbef3596c9835d5_arm64",
                "product": {
                  "name": "registry.redhat.io/rhceph/grafana-rhel9@sha256:044d55095e592d054a5ec69603c1fd8886ea3efcedfd95945dbef3596c9835d5_arm64",
                  "product_id": "registry.redhat.io/rhceph/grafana-rhel9@sha256:044d55095e592d054a5ec69603c1fd8886ea3efcedfd95945dbef3596c9835d5_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/grafana-rhel9@sha256%3A044d55095e592d054a5ec69603c1fd8886ea3efcedfd95945dbef3596c9835d5?arch=arm64\u0026repository_url=registry.redhat.io/rhceph/grafana-rhel9\u0026tag=1787305054"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:ed001e7318e45d7c0372b966a8c447eddf75d1079b1b937872c2c12893389849_arm64",
                "product": {
                  "name": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:ed001e7318e45d7c0372b966a8c447eddf75d1079b1b937872c2c12893389849_arm64",
                  "product_id": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:ed001e7318e45d7c0372b966a8c447eddf75d1079b1b937872c2c12893389849_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhceph-haproxy-rhel9@sha256%3Aed001e7318e45d7c0372b966a8c447eddf75d1079b1b937872c2c12893389849?arch=arm64\u0026repository_url=registry.redhat.io/rhceph/rhceph-haproxy-rhel9\u0026tag=1787304199"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:8aac763313e46322e3d0fbb3fbed767228906f75865d54eb753f03f027408926_arm64",
                "product": {
                  "name": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:8aac763313e46322e3d0fbb3fbed767228906f75865d54eb753f03f027408926_arm64",
                  "product_id": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:8aac763313e46322e3d0fbb3fbed767228906f75865d54eb753f03f027408926_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keepalived-rhel9@sha256%3A8aac763313e46322e3d0fbb3fbed767228906f75865d54eb753f03f027408926?arch=arm64\u0026repository_url=registry.redhat.io/rhceph/keepalived-rhel9\u0026tag=1787303659"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:79bd982b6824100b974103347eaaa7f34c60f4b1118c93d7e628bafb11945a17_arm64",
                "product": {
                  "name": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:79bd982b6824100b974103347eaaa7f34c60f4b1118c93d7e628bafb11945a17_arm64",
                  "product_id": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:79bd982b6824100b974103347eaaa7f34c60f4b1118c93d7e628bafb11945a17_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oauth2-proxy-rhel9@sha256%3A79bd982b6824100b974103347eaaa7f34c60f4b1118c93d7e628bafb11945a17?arch=arm64\u0026repository_url=registry.redhat.io/rhceph/oauth2-proxy-rhel9\u0026tag=1787304106"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:db068d24b3055fe96d2fa8703405eca07634238306159e3803ff4ae23f1024fd_arm64",
                "product": {
                  "name": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:db068d24b3055fe96d2fa8703405eca07634238306159e3803ff4ae23f1024fd_arm64",
                  "product_id": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:db068d24b3055fe96d2fa8703405eca07634238306159e3803ff4ae23f1024fd_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhceph-promtail-rhel9@sha256%3Adb068d24b3055fe96d2fa8703405eca07634238306159e3803ff4ae23f1024fd?arch=arm64\u0026repository_url=registry.redhat.io/rhceph/rhceph-promtail-rhel9\u0026tag=1787304137"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:070f43995aae0152eac7d228ae7d4d005eb57e06e14aef1b50d4db64341b826a_arm64",
                "product": {
                  "name": "registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:070f43995aae0152eac7d228ae7d4d005eb57e06e14aef1b50d4db64341b826a_arm64",
                  "product_id": "registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:070f43995aae0152eac7d228ae7d4d005eb57e06e14aef1b50d4db64341b826a_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhceph-8-rhel9@sha256%3A070f43995aae0152eac7d228ae7d4d005eb57e06e14aef1b50d4db64341b826a?arch=arm64\u0026repository_url=registry.redhat.io/rhceph/rhceph-8-rhel9\u0026tag=1787550654"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:b48486f663889cd57eead6f097d6cc26e6c2ff9bdfbb6f24b8d1f8d2e42a2b4c_arm64",
                "product": {
                  "name": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:b48486f663889cd57eead6f097d6cc26e6c2ff9bdfbb6f24b8d1f8d2e42a2b4c_arm64",
                  "product_id": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:b48486f663889cd57eead6f097d6cc26e6c2ff9bdfbb6f24b8d1f8d2e42a2b4c_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/snmp-notifier-rhel9@sha256%3Ab48486f663889cd57eead6f097d6cc26e6c2ff9bdfbb6f24b8d1f8d2e42a2b4c?arch=arm64\u0026repository_url=registry.redhat.io/rhceph/snmp-notifier-rhel9\u0026tag=1787303640"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/grafana-rhel9@sha256:bbb4f2499a816032af66bb8b022d8a51198a5db01ee39714800340cbd4a45d40_s390x",
                "product": {
                  "name": "registry.redhat.io/rhceph/grafana-rhel9@sha256:bbb4f2499a816032af66bb8b022d8a51198a5db01ee39714800340cbd4a45d40_s390x",
                  "product_id": "registry.redhat.io/rhceph/grafana-rhel9@sha256:bbb4f2499a816032af66bb8b022d8a51198a5db01ee39714800340cbd4a45d40_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/grafana-rhel9@sha256%3Abbb4f2499a816032af66bb8b022d8a51198a5db01ee39714800340cbd4a45d40?arch=s390x\u0026repository_url=registry.redhat.io/rhceph/grafana-rhel9\u0026tag=1787305054"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7256c524d36f6128bffc8fdeec7e9ec435d43ceb57afd1512e496f85a09376f9_s390x",
                "product": {
                  "name": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7256c524d36f6128bffc8fdeec7e9ec435d43ceb57afd1512e496f85a09376f9_s390x",
                  "product_id": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7256c524d36f6128bffc8fdeec7e9ec435d43ceb57afd1512e496f85a09376f9_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhceph-haproxy-rhel9@sha256%3A7256c524d36f6128bffc8fdeec7e9ec435d43ceb57afd1512e496f85a09376f9?arch=s390x\u0026repository_url=registry.redhat.io/rhceph/rhceph-haproxy-rhel9\u0026tag=1787304199"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:cbd32c0b082f368583eeff3657a97a79a11ccb5d3bcf5663dd8738d09a0d53e8_s390x",
                "product": {
                  "name": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:cbd32c0b082f368583eeff3657a97a79a11ccb5d3bcf5663dd8738d09a0d53e8_s390x",
                  "product_id": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:cbd32c0b082f368583eeff3657a97a79a11ccb5d3bcf5663dd8738d09a0d53e8_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keepalived-rhel9@sha256%3Acbd32c0b082f368583eeff3657a97a79a11ccb5d3bcf5663dd8738d09a0d53e8?arch=s390x\u0026repository_url=registry.redhat.io/rhceph/keepalived-rhel9\u0026tag=1787303659"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3a7dedb1b1fee0c80dcfe0f3ebce6e20aa6a364fe66808458f5416ae09890c56_s390x",
                "product": {
                  "name": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3a7dedb1b1fee0c80dcfe0f3ebce6e20aa6a364fe66808458f5416ae09890c56_s390x",
                  "product_id": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3a7dedb1b1fee0c80dcfe0f3ebce6e20aa6a364fe66808458f5416ae09890c56_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oauth2-proxy-rhel9@sha256%3A3a7dedb1b1fee0c80dcfe0f3ebce6e20aa6a364fe66808458f5416ae09890c56?arch=s390x\u0026repository_url=registry.redhat.io/rhceph/oauth2-proxy-rhel9\u0026tag=1787304106"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:63eed84d24f949baf09d2294dcc9849e72a6cbe6213844872efb9843898a132f_s390x",
                "product": {
                  "name": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:63eed84d24f949baf09d2294dcc9849e72a6cbe6213844872efb9843898a132f_s390x",
                  "product_id": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:63eed84d24f949baf09d2294dcc9849e72a6cbe6213844872efb9843898a132f_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhceph-promtail-rhel9@sha256%3A63eed84d24f949baf09d2294dcc9849e72a6cbe6213844872efb9843898a132f?arch=s390x\u0026repository_url=registry.redhat.io/rhceph/rhceph-promtail-rhel9\u0026tag=1787304137"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:decb2f66e30c9500882c35f898e7da4e4d2ee31a7421b9dcab736350c7a5a771_s390x",
                "product": {
                  "name": "registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:decb2f66e30c9500882c35f898e7da4e4d2ee31a7421b9dcab736350c7a5a771_s390x",
                  "product_id": "registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:decb2f66e30c9500882c35f898e7da4e4d2ee31a7421b9dcab736350c7a5a771_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhceph-8-rhel9@sha256%3Adecb2f66e30c9500882c35f898e7da4e4d2ee31a7421b9dcab736350c7a5a771?arch=s390x\u0026repository_url=registry.redhat.io/rhceph/rhceph-8-rhel9\u0026tag=1787550654"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:86d8a15cc12eaf34d01d077924301ee0276bc2b9539987b1133dc9b65609d660_s390x",
                "product": {
                  "name": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:86d8a15cc12eaf34d01d077924301ee0276bc2b9539987b1133dc9b65609d660_s390x",
                  "product_id": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:86d8a15cc12eaf34d01d077924301ee0276bc2b9539987b1133dc9b65609d660_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/snmp-notifier-rhel9@sha256%3A86d8a15cc12eaf34d01d077924301ee0276bc2b9539987b1133dc9b65609d660?arch=s390x\u0026repository_url=registry.redhat.io/rhceph/snmp-notifier-rhel9\u0026tag=1787303640"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/grafana-rhel9@sha256:9b426d409203a3366689db14f15b0d8639d231945678184c3b43869d56705dbd_ppc64le",
                "product": {
                  "name": "registry.redhat.io/rhceph/grafana-rhel9@sha256:9b426d409203a3366689db14f15b0d8639d231945678184c3b43869d56705dbd_ppc64le",
                  "product_id": "registry.redhat.io/rhceph/grafana-rhel9@sha256:9b426d409203a3366689db14f15b0d8639d231945678184c3b43869d56705dbd_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/grafana-rhel9@sha256%3A9b426d409203a3366689db14f15b0d8639d231945678184c3b43869d56705dbd?arch=ppc64le\u0026repository_url=registry.redhat.io/rhceph/grafana-rhel9\u0026tag=1787305054"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3c1bbf300b5bd123493c57ffe84ca24bf14fcf32b648cc8c279ad3a3101c19c8_ppc64le",
                "product": {
                  "name": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3c1bbf300b5bd123493c57ffe84ca24bf14fcf32b648cc8c279ad3a3101c19c8_ppc64le",
                  "product_id": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3c1bbf300b5bd123493c57ffe84ca24bf14fcf32b648cc8c279ad3a3101c19c8_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhceph-haproxy-rhel9@sha256%3A3c1bbf300b5bd123493c57ffe84ca24bf14fcf32b648cc8c279ad3a3101c19c8?arch=ppc64le\u0026repository_url=registry.redhat.io/rhceph/rhceph-haproxy-rhel9\u0026tag=1787304199"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:39cf934468566964e44ddac65928d837528d126d16d5ad6d71298c0570b0066d_ppc64le",
                "product": {
                  "name": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:39cf934468566964e44ddac65928d837528d126d16d5ad6d71298c0570b0066d_ppc64le",
                  "product_id": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:39cf934468566964e44ddac65928d837528d126d16d5ad6d71298c0570b0066d_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keepalived-rhel9@sha256%3A39cf934468566964e44ddac65928d837528d126d16d5ad6d71298c0570b0066d?arch=ppc64le\u0026repository_url=registry.redhat.io/rhceph/keepalived-rhel9\u0026tag=1787303659"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:765efce53826bcdd18c41186fb1fa291e9b1450c43706747d2be1dd5addda19a_ppc64le",
                "product": {
                  "name": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:765efce53826bcdd18c41186fb1fa291e9b1450c43706747d2be1dd5addda19a_ppc64le",
                  "product_id": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:765efce53826bcdd18c41186fb1fa291e9b1450c43706747d2be1dd5addda19a_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oauth2-proxy-rhel9@sha256%3A765efce53826bcdd18c41186fb1fa291e9b1450c43706747d2be1dd5addda19a?arch=ppc64le\u0026repository_url=registry.redhat.io/rhceph/oauth2-proxy-rhel9\u0026tag=1787304106"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:4493b44fc1a487413d554826a92f82a44aca453e8c5d9c476ed47ef3efc1123a_ppc64le",
                "product": {
                  "name": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:4493b44fc1a487413d554826a92f82a44aca453e8c5d9c476ed47ef3efc1123a_ppc64le",
                  "product_id": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:4493b44fc1a487413d554826a92f82a44aca453e8c5d9c476ed47ef3efc1123a_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhceph-promtail-rhel9@sha256%3A4493b44fc1a487413d554826a92f82a44aca453e8c5d9c476ed47ef3efc1123a?arch=ppc64le\u0026repository_url=registry.redhat.io/rhceph/rhceph-promtail-rhel9\u0026tag=1787304137"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:b36874b30b49a770f223a34034ae128a1a02fe0dfdb16cea5432ed67a24728af_ppc64le",
                "product": {
                  "name": "registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:b36874b30b49a770f223a34034ae128a1a02fe0dfdb16cea5432ed67a24728af_ppc64le",
                  "product_id": "registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:b36874b30b49a770f223a34034ae128a1a02fe0dfdb16cea5432ed67a24728af_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rhceph-8-rhel9@sha256%3Ab36874b30b49a770f223a34034ae128a1a02fe0dfdb16cea5432ed67a24728af?arch=ppc64le\u0026repository_url=registry.redhat.io/rhceph/rhceph-8-rhel9\u0026tag=1787550654"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:65f82ec0df5d07b18d73620b7823bf7a51f33c3f3c4c44b290d9cd5f79c8e64a_ppc64le",
                "product": {
                  "name": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:65f82ec0df5d07b18d73620b7823bf7a51f33c3f3c4c44b290d9cd5f79c8e64a_ppc64le",
                  "product_id": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:65f82ec0df5d07b18d73620b7823bf7a51f33c3f3c4c44b290d9cd5f79c8e64a_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/snmp-notifier-rhel9@sha256%3A65f82ec0df5d07b18d73620b7823bf7a51f33c3f3c4c44b290d9cd5f79c8e64a?arch=ppc64le\u0026repository_url=registry.redhat.io/rhceph/snmp-notifier-rhel9\u0026tag=1787303640"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/grafana-rhel9@sha256:044d55095e592d054a5ec69603c1fd8886ea3efcedfd95945dbef3596c9835d5_arm64 as a component of Red Hat Ceph Storage 8.1",
          "product_id": "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:044d55095e592d054a5ec69603c1fd8886ea3efcedfd95945dbef3596c9835d5_arm64"
        },
        "product_reference": "registry.redhat.io/rhceph/grafana-rhel9@sha256:044d55095e592d054a5ec69603c1fd8886ea3efcedfd95945dbef3596c9835d5_arm64",
        "relates_to_product_reference": "Red Hat Ceph Storage 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/grafana-rhel9@sha256:9b426d409203a3366689db14f15b0d8639d231945678184c3b43869d56705dbd_ppc64le as a component of Red Hat Ceph Storage 8.1",
          "product_id": "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9b426d409203a3366689db14f15b0d8639d231945678184c3b43869d56705dbd_ppc64le"
        },
        "product_reference": "registry.redhat.io/rhceph/grafana-rhel9@sha256:9b426d409203a3366689db14f15b0d8639d231945678184c3b43869d56705dbd_ppc64le",
        "relates_to_product_reference": "Red Hat Ceph Storage 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/grafana-rhel9@sha256:a1642617a4fc8ff1b79299b160b0f644eeafeb4809981a9d00a3e621ec8bb096_amd64 as a component of Red Hat Ceph Storage 8.1",
          "product_id": "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:a1642617a4fc8ff1b79299b160b0f644eeafeb4809981a9d00a3e621ec8bb096_amd64"
        },
        "product_reference": "registry.redhat.io/rhceph/grafana-rhel9@sha256:a1642617a4fc8ff1b79299b160b0f644eeafeb4809981a9d00a3e621ec8bb096_amd64",
        "relates_to_product_reference": "Red Hat Ceph Storage 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/grafana-rhel9@sha256:bbb4f2499a816032af66bb8b022d8a51198a5db01ee39714800340cbd4a45d40_s390x as a component of Red Hat Ceph Storage 8.1",
          "product_id": "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:bbb4f2499a816032af66bb8b022d8a51198a5db01ee39714800340cbd4a45d40_s390x"
        },
        "product_reference": "registry.redhat.io/rhceph/grafana-rhel9@sha256:bbb4f2499a816032af66bb8b022d8a51198a5db01ee39714800340cbd4a45d40_s390x",
        "relates_to_product_reference": "Red Hat Ceph Storage 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:39cf934468566964e44ddac65928d837528d126d16d5ad6d71298c0570b0066d_ppc64le as a component of Red Hat Ceph Storage 8.1",
          "product_id": "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:39cf934468566964e44ddac65928d837528d126d16d5ad6d71298c0570b0066d_ppc64le"
        },
        "product_reference": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:39cf934468566964e44ddac65928d837528d126d16d5ad6d71298c0570b0066d_ppc64le",
        "relates_to_product_reference": "Red Hat Ceph Storage 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:3d2d10adc4f85192a3729477777b068366b5178512724d3ffd6c498ba577d847_amd64 as a component of Red Hat Ceph Storage 8.1",
          "product_id": "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3d2d10adc4f85192a3729477777b068366b5178512724d3ffd6c498ba577d847_amd64"
        },
        "product_reference": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:3d2d10adc4f85192a3729477777b068366b5178512724d3ffd6c498ba577d847_amd64",
        "relates_to_product_reference": "Red Hat Ceph Storage 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:8aac763313e46322e3d0fbb3fbed767228906f75865d54eb753f03f027408926_arm64 as a component of Red Hat Ceph Storage 8.1",
          "product_id": "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:8aac763313e46322e3d0fbb3fbed767228906f75865d54eb753f03f027408926_arm64"
        },
        "product_reference": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:8aac763313e46322e3d0fbb3fbed767228906f75865d54eb753f03f027408926_arm64",
        "relates_to_product_reference": "Red Hat Ceph Storage 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:cbd32c0b082f368583eeff3657a97a79a11ccb5d3bcf5663dd8738d09a0d53e8_s390x as a component of Red Hat Ceph Storage 8.1",
          "product_id": "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:cbd32c0b082f368583eeff3657a97a79a11ccb5d3bcf5663dd8738d09a0d53e8_s390x"
        },
        "product_reference": "registry.redhat.io/rhceph/keepalived-rhel9@sha256:cbd32c0b082f368583eeff3657a97a79a11ccb5d3bcf5663dd8738d09a0d53e8_s390x",
        "relates_to_product_reference": "Red Hat Ceph Storage 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3a7dedb1b1fee0c80dcfe0f3ebce6e20aa6a364fe66808458f5416ae09890c56_s390x as a component of Red Hat Ceph Storage 8.1",
          "product_id": "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3a7dedb1b1fee0c80dcfe0f3ebce6e20aa6a364fe66808458f5416ae09890c56_s390x"
        },
        "product_reference": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3a7dedb1b1fee0c80dcfe0f3ebce6e20aa6a364fe66808458f5416ae09890c56_s390x",
        "relates_to_product_reference": "Red Hat Ceph Storage 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3d4665881548c0808fea1612a972c732c5f2b928ad49fbb8025ceb7f410faabb_amd64 as a component of Red Hat Ceph Storage 8.1",
          "product_id": "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3d4665881548c0808fea1612a972c732c5f2b928ad49fbb8025ceb7f410faabb_amd64"
        },
        "product_reference": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3d4665881548c0808fea1612a972c732c5f2b928ad49fbb8025ceb7f410faabb_amd64",
        "relates_to_product_reference": "Red Hat Ceph Storage 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:765efce53826bcdd18c41186fb1fa291e9b1450c43706747d2be1dd5addda19a_ppc64le as a component of Red Hat Ceph Storage 8.1",
          "product_id": "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:765efce53826bcdd18c41186fb1fa291e9b1450c43706747d2be1dd5addda19a_ppc64le"
        },
        "product_reference": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:765efce53826bcdd18c41186fb1fa291e9b1450c43706747d2be1dd5addda19a_ppc64le",
        "relates_to_product_reference": "Red Hat Ceph Storage 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:79bd982b6824100b974103347eaaa7f34c60f4b1118c93d7e628bafb11945a17_arm64 as a component of Red Hat Ceph Storage 8.1",
          "product_id": "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:79bd982b6824100b974103347eaaa7f34c60f4b1118c93d7e628bafb11945a17_arm64"
        },
        "product_reference": "registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:79bd982b6824100b974103347eaaa7f34c60f4b1118c93d7e628bafb11945a17_arm64",
        "relates_to_product_reference": "Red Hat Ceph Storage 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:070f43995aae0152eac7d228ae7d4d005eb57e06e14aef1b50d4db64341b826a_arm64 as a component of Red Hat Ceph Storage 8.1",
          "product_id": "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:070f43995aae0152eac7d228ae7d4d005eb57e06e14aef1b50d4db64341b826a_arm64"
        },
        "product_reference": "registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:070f43995aae0152eac7d228ae7d4d005eb57e06e14aef1b50d4db64341b826a_arm64",
        "relates_to_product_reference": "Red Hat Ceph Storage 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:6c084d7b7609111b8c28d22a7e69d2093607e9a648b7fb7259bcf5693ca35875_amd64 as a component of Red Hat Ceph Storage 8.1",
          "product_id": "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:6c084d7b7609111b8c28d22a7e69d2093607e9a648b7fb7259bcf5693ca35875_amd64"
        },
        "product_reference": "registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:6c084d7b7609111b8c28d22a7e69d2093607e9a648b7fb7259bcf5693ca35875_amd64",
        "relates_to_product_reference": "Red Hat Ceph Storage 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:b36874b30b49a770f223a34034ae128a1a02fe0dfdb16cea5432ed67a24728af_ppc64le as a component of Red Hat Ceph Storage 8.1",
          "product_id": "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:b36874b30b49a770f223a34034ae128a1a02fe0dfdb16cea5432ed67a24728af_ppc64le"
        },
        "product_reference": "registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:b36874b30b49a770f223a34034ae128a1a02fe0dfdb16cea5432ed67a24728af_ppc64le",
        "relates_to_product_reference": "Red Hat Ceph Storage 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:decb2f66e30c9500882c35f898e7da4e4d2ee31a7421b9dcab736350c7a5a771_s390x as a component of Red Hat Ceph Storage 8.1",
          "product_id": "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:decb2f66e30c9500882c35f898e7da4e4d2ee31a7421b9dcab736350c7a5a771_s390x"
        },
        "product_reference": "registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:decb2f66e30c9500882c35f898e7da4e4d2ee31a7421b9dcab736350c7a5a771_s390x",
        "relates_to_product_reference": "Red Hat Ceph Storage 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3c1bbf300b5bd123493c57ffe84ca24bf14fcf32b648cc8c279ad3a3101c19c8_ppc64le as a component of Red Hat Ceph Storage 8.1",
          "product_id": "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3c1bbf300b5bd123493c57ffe84ca24bf14fcf32b648cc8c279ad3a3101c19c8_ppc64le"
        },
        "product_reference": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3c1bbf300b5bd123493c57ffe84ca24bf14fcf32b648cc8c279ad3a3101c19c8_ppc64le",
        "relates_to_product_reference": "Red Hat Ceph Storage 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7256c524d36f6128bffc8fdeec7e9ec435d43ceb57afd1512e496f85a09376f9_s390x as a component of Red Hat Ceph Storage 8.1",
          "product_id": "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7256c524d36f6128bffc8fdeec7e9ec435d43ceb57afd1512e496f85a09376f9_s390x"
        },
        "product_reference": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7256c524d36f6128bffc8fdeec7e9ec435d43ceb57afd1512e496f85a09376f9_s390x",
        "relates_to_product_reference": "Red Hat Ceph Storage 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7e7b6ea0214c616e7ef462152854207afe84732c54150914fa6180d8cc29a4ad_amd64 as a component of Red Hat Ceph Storage 8.1",
          "product_id": "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7e7b6ea0214c616e7ef462152854207afe84732c54150914fa6180d8cc29a4ad_amd64"
        },
        "product_reference": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7e7b6ea0214c616e7ef462152854207afe84732c54150914fa6180d8cc29a4ad_amd64",
        "relates_to_product_reference": "Red Hat Ceph Storage 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:ed001e7318e45d7c0372b966a8c447eddf75d1079b1b937872c2c12893389849_arm64 as a component of Red Hat Ceph Storage 8.1",
          "product_id": "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:ed001e7318e45d7c0372b966a8c447eddf75d1079b1b937872c2c12893389849_arm64"
        },
        "product_reference": "registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:ed001e7318e45d7c0372b966a8c447eddf75d1079b1b937872c2c12893389849_arm64",
        "relates_to_product_reference": "Red Hat Ceph Storage 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:4493b44fc1a487413d554826a92f82a44aca453e8c5d9c476ed47ef3efc1123a_ppc64le as a component of Red Hat Ceph Storage 8.1",
          "product_id": "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:4493b44fc1a487413d554826a92f82a44aca453e8c5d9c476ed47ef3efc1123a_ppc64le"
        },
        "product_reference": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:4493b44fc1a487413d554826a92f82a44aca453e8c5d9c476ed47ef3efc1123a_ppc64le",
        "relates_to_product_reference": "Red Hat Ceph Storage 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:63eed84d24f949baf09d2294dcc9849e72a6cbe6213844872efb9843898a132f_s390x as a component of Red Hat Ceph Storage 8.1",
          "product_id": "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:63eed84d24f949baf09d2294dcc9849e72a6cbe6213844872efb9843898a132f_s390x"
        },
        "product_reference": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:63eed84d24f949baf09d2294dcc9849e72a6cbe6213844872efb9843898a132f_s390x",
        "relates_to_product_reference": "Red Hat Ceph Storage 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:b0ba95a2611c37db8f149d5fe44f424f3ff696535f7e5ac5cbadd45837f864cb_amd64 as a component of Red Hat Ceph Storage 8.1",
          "product_id": "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:b0ba95a2611c37db8f149d5fe44f424f3ff696535f7e5ac5cbadd45837f864cb_amd64"
        },
        "product_reference": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:b0ba95a2611c37db8f149d5fe44f424f3ff696535f7e5ac5cbadd45837f864cb_amd64",
        "relates_to_product_reference": "Red Hat Ceph Storage 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:db068d24b3055fe96d2fa8703405eca07634238306159e3803ff4ae23f1024fd_arm64 as a component of Red Hat Ceph Storage 8.1",
          "product_id": "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:db068d24b3055fe96d2fa8703405eca07634238306159e3803ff4ae23f1024fd_arm64"
        },
        "product_reference": "registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:db068d24b3055fe96d2fa8703405eca07634238306159e3803ff4ae23f1024fd_arm64",
        "relates_to_product_reference": "Red Hat Ceph Storage 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:65f82ec0df5d07b18d73620b7823bf7a51f33c3f3c4c44b290d9cd5f79c8e64a_ppc64le as a component of Red Hat Ceph Storage 8.1",
          "product_id": "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:65f82ec0df5d07b18d73620b7823bf7a51f33c3f3c4c44b290d9cd5f79c8e64a_ppc64le"
        },
        "product_reference": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:65f82ec0df5d07b18d73620b7823bf7a51f33c3f3c4c44b290d9cd5f79c8e64a_ppc64le",
        "relates_to_product_reference": "Red Hat Ceph Storage 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:86d8a15cc12eaf34d01d077924301ee0276bc2b9539987b1133dc9b65609d660_s390x as a component of Red Hat Ceph Storage 8.1",
          "product_id": "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:86d8a15cc12eaf34d01d077924301ee0276bc2b9539987b1133dc9b65609d660_s390x"
        },
        "product_reference": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:86d8a15cc12eaf34d01d077924301ee0276bc2b9539987b1133dc9b65609d660_s390x",
        "relates_to_product_reference": "Red Hat Ceph Storage 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:b48486f663889cd57eead6f097d6cc26e6c2ff9bdfbb6f24b8d1f8d2e42a2b4c_arm64 as a component of Red Hat Ceph Storage 8.1",
          "product_id": "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:b48486f663889cd57eead6f097d6cc26e6c2ff9bdfbb6f24b8d1f8d2e42a2b4c_arm64"
        },
        "product_reference": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:b48486f663889cd57eead6f097d6cc26e6c2ff9bdfbb6f24b8d1f8d2e42a2b4c_arm64",
        "relates_to_product_reference": "Red Hat Ceph Storage 8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:de99e5235ccf7714e7df2ef04b8c5c60c3efe04cacee13acfbaddaa60c5f88bf_amd64 as a component of Red Hat Ceph Storage 8.1",
          "product_id": "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:de99e5235ccf7714e7df2ef04b8c5c60c3efe04cacee13acfbaddaa60c5f88bf_amd64"
        },
        "product_reference": "registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:de99e5235ccf7714e7df2ef04b8c5c60c3efe04cacee13acfbaddaa60c5f88bf_amd64",
        "relates_to_product_reference": "Red Hat Ceph Storage 8.1"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-10790",
      "discovery_date": "2025-08-20T22:37:38.151000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:044d55095e592d054a5ec69603c1fd8886ea3efcedfd95945dbef3596c9835d5_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9b426d409203a3366689db14f15b0d8639d231945678184c3b43869d56705dbd_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:a1642617a4fc8ff1b79299b160b0f644eeafeb4809981a9d00a3e621ec8bb096_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:bbb4f2499a816032af66bb8b022d8a51198a5db01ee39714800340cbd4a45d40_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:39cf934468566964e44ddac65928d837528d126d16d5ad6d71298c0570b0066d_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3d2d10adc4f85192a3729477777b068366b5178512724d3ffd6c498ba577d847_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:8aac763313e46322e3d0fbb3fbed767228906f75865d54eb753f03f027408926_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:cbd32c0b082f368583eeff3657a97a79a11ccb5d3bcf5663dd8738d09a0d53e8_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3a7dedb1b1fee0c80dcfe0f3ebce6e20aa6a364fe66808458f5416ae09890c56_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3d4665881548c0808fea1612a972c732c5f2b928ad49fbb8025ceb7f410faabb_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:765efce53826bcdd18c41186fb1fa291e9b1450c43706747d2be1dd5addda19a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:79bd982b6824100b974103347eaaa7f34c60f4b1118c93d7e628bafb11945a17_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3c1bbf300b5bd123493c57ffe84ca24bf14fcf32b648cc8c279ad3a3101c19c8_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7256c524d36f6128bffc8fdeec7e9ec435d43ceb57afd1512e496f85a09376f9_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7e7b6ea0214c616e7ef462152854207afe84732c54150914fa6180d8cc29a4ad_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:ed001e7318e45d7c0372b966a8c447eddf75d1079b1b937872c2c12893389849_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:4493b44fc1a487413d554826a92f82a44aca453e8c5d9c476ed47ef3efc1123a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:63eed84d24f949baf09d2294dcc9849e72a6cbe6213844872efb9843898a132f_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:b0ba95a2611c37db8f149d5fe44f424f3ff696535f7e5ac5cbadd45837f864cb_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:db068d24b3055fe96d2fa8703405eca07634238306159e3803ff4ae23f1024fd_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:65f82ec0df5d07b18d73620b7823bf7a51f33c3f3c4c44b290d9cd5f79c8e64a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:86d8a15cc12eaf34d01d077924301ee0276bc2b9539987b1133dc9b65609d660_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:b48486f663889cd57eead6f097d6cc26e6c2ff9bdfbb6f24b8d1f8d2e42a2b4c_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:de99e5235ccf7714e7df2ef04b8c5c60c3efe04cacee13acfbaddaa60c5f88bf_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2389970"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "taffydb npm module, vulnerable in all versions up to and including 2.7.3, allows attackers to forge adding additional properties into user-input processed by taffy which can allow access to any data items in the DB. taffy sets an internal index for each data item in its DB. However, it is found that the internal index can be forged by adding additional properties into user-input. If index is found in the query, taffyDB will ignore other query conditions and directly return the indexed data item. Moreover, the internal index is in an easily-guessable format (e.g., T000002R000001). As such, attackers can use this vulnerability to access any data items in the DB.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "taffy: taffydb: Internal Property Tampering",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:070f43995aae0152eac7d228ae7d4d005eb57e06e14aef1b50d4db64341b826a_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:6c084d7b7609111b8c28d22a7e69d2093607e9a648b7fb7259bcf5693ca35875_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:b36874b30b49a770f223a34034ae128a1a02fe0dfdb16cea5432ed67a24728af_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:decb2f66e30c9500882c35f898e7da4e4d2ee31a7421b9dcab736350c7a5a771_s390x"
        ],
        "known_not_affected": [
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:044d55095e592d054a5ec69603c1fd8886ea3efcedfd95945dbef3596c9835d5_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9b426d409203a3366689db14f15b0d8639d231945678184c3b43869d56705dbd_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:a1642617a4fc8ff1b79299b160b0f644eeafeb4809981a9d00a3e621ec8bb096_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:bbb4f2499a816032af66bb8b022d8a51198a5db01ee39714800340cbd4a45d40_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:39cf934468566964e44ddac65928d837528d126d16d5ad6d71298c0570b0066d_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3d2d10adc4f85192a3729477777b068366b5178512724d3ffd6c498ba577d847_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:8aac763313e46322e3d0fbb3fbed767228906f75865d54eb753f03f027408926_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:cbd32c0b082f368583eeff3657a97a79a11ccb5d3bcf5663dd8738d09a0d53e8_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3a7dedb1b1fee0c80dcfe0f3ebce6e20aa6a364fe66808458f5416ae09890c56_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3d4665881548c0808fea1612a972c732c5f2b928ad49fbb8025ceb7f410faabb_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:765efce53826bcdd18c41186fb1fa291e9b1450c43706747d2be1dd5addda19a_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:79bd982b6824100b974103347eaaa7f34c60f4b1118c93d7e628bafb11945a17_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3c1bbf300b5bd123493c57ffe84ca24bf14fcf32b648cc8c279ad3a3101c19c8_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7256c524d36f6128bffc8fdeec7e9ec435d43ceb57afd1512e496f85a09376f9_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7e7b6ea0214c616e7ef462152854207afe84732c54150914fa6180d8cc29a4ad_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:ed001e7318e45d7c0372b966a8c447eddf75d1079b1b937872c2c12893389849_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:4493b44fc1a487413d554826a92f82a44aca453e8c5d9c476ed47ef3efc1123a_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:63eed84d24f949baf09d2294dcc9849e72a6cbe6213844872efb9843898a132f_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:b0ba95a2611c37db8f149d5fe44f424f3ff696535f7e5ac5cbadd45837f864cb_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:db068d24b3055fe96d2fa8703405eca07634238306159e3803ff4ae23f1024fd_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:65f82ec0df5d07b18d73620b7823bf7a51f33c3f3c4c44b290d9cd5f79c8e64a_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:86d8a15cc12eaf34d01d077924301ee0276bc2b9539987b1133dc9b65609d660_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:b48486f663889cd57eead6f097d6cc26e6c2ff9bdfbb6f24b8d1f8d2e42a2b4c_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:de99e5235ccf7714e7df2ef04b8c5c60c3efe04cacee13acfbaddaa60c5f88bf_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-10790"
        },
        {
          "category": "external",
          "summary": "RHBZ#2389970",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2389970"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-10790",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-10790"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-10790",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10790"
        },
        {
          "category": "external",
          "summary": "https://security.snyk.io/vuln/SNYK-JS-TAFFYDB-2992450",
          "url": "https://security.snyk.io/vuln/SNYK-JS-TAFFYDB-2992450"
        },
        {
          "category": "external",
          "summary": "https://snyk.io/vuln/SNYK-JS-TAFFY-546521",
          "url": "https://snyk.io/vuln/SNYK-JS-TAFFY-546521"
        },
        {
          "category": "external",
          "summary": "https://www.npmjs.com/package/taffy",
          "url": "https://www.npmjs.com/package/taffy"
        },
        {
          "category": "external",
          "summary": "https://www.usenix.org/system/files/sec21-xiao.pdf",
          "url": "https://www.usenix.org/system/files/sec21-xiao.pdf"
        }
      ],
      "release_date": "2020-02-17T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-01T13:31:31+00:00",
          "details": "The container images provided by this update can be downloaded from the\nRed Hat container registry at registry.redhat.io using the \"podman pull\" command.",
          "product_ids": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:070f43995aae0152eac7d228ae7d4d005eb57e06e14aef1b50d4db64341b826a_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:6c084d7b7609111b8c28d22a7e69d2093607e9a648b7fb7259bcf5693ca35875_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:b36874b30b49a770f223a34034ae128a1a02fe0dfdb16cea5432ed67a24728af_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:decb2f66e30c9500882c35f898e7da4e4d2ee31a7421b9dcab736350c7a5a771_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:62115"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:044d55095e592d054a5ec69603c1fd8886ea3efcedfd95945dbef3596c9835d5_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9b426d409203a3366689db14f15b0d8639d231945678184c3b43869d56705dbd_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:a1642617a4fc8ff1b79299b160b0f644eeafeb4809981a9d00a3e621ec8bb096_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:bbb4f2499a816032af66bb8b022d8a51198a5db01ee39714800340cbd4a45d40_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:39cf934468566964e44ddac65928d837528d126d16d5ad6d71298c0570b0066d_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3d2d10adc4f85192a3729477777b068366b5178512724d3ffd6c498ba577d847_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:8aac763313e46322e3d0fbb3fbed767228906f75865d54eb753f03f027408926_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:cbd32c0b082f368583eeff3657a97a79a11ccb5d3bcf5663dd8738d09a0d53e8_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3a7dedb1b1fee0c80dcfe0f3ebce6e20aa6a364fe66808458f5416ae09890c56_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3d4665881548c0808fea1612a972c732c5f2b928ad49fbb8025ceb7f410faabb_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:765efce53826bcdd18c41186fb1fa291e9b1450c43706747d2be1dd5addda19a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:79bd982b6824100b974103347eaaa7f34c60f4b1118c93d7e628bafb11945a17_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:070f43995aae0152eac7d228ae7d4d005eb57e06e14aef1b50d4db64341b826a_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:6c084d7b7609111b8c28d22a7e69d2093607e9a648b7fb7259bcf5693ca35875_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:b36874b30b49a770f223a34034ae128a1a02fe0dfdb16cea5432ed67a24728af_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:decb2f66e30c9500882c35f898e7da4e4d2ee31a7421b9dcab736350c7a5a771_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3c1bbf300b5bd123493c57ffe84ca24bf14fcf32b648cc8c279ad3a3101c19c8_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7256c524d36f6128bffc8fdeec7e9ec435d43ceb57afd1512e496f85a09376f9_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7e7b6ea0214c616e7ef462152854207afe84732c54150914fa6180d8cc29a4ad_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:ed001e7318e45d7c0372b966a8c447eddf75d1079b1b937872c2c12893389849_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:4493b44fc1a487413d554826a92f82a44aca453e8c5d9c476ed47ef3efc1123a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:63eed84d24f949baf09d2294dcc9849e72a6cbe6213844872efb9843898a132f_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:b0ba95a2611c37db8f149d5fe44f424f3ff696535f7e5ac5cbadd45837f864cb_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:db068d24b3055fe96d2fa8703405eca07634238306159e3803ff4ae23f1024fd_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:65f82ec0df5d07b18d73620b7823bf7a51f33c3f3c4c44b290d9cd5f79c8e64a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:86d8a15cc12eaf34d01d077924301ee0276bc2b9539987b1133dc9b65609d660_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:b48486f663889cd57eead6f097d6cc26e6c2ff9bdfbb6f24b8d1f8d2e42a2b4c_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:de99e5235ccf7714e7df2ef04b8c5c60c3efe04cacee13acfbaddaa60c5f88bf_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "taffy: taffydb: Internal Property Tampering"
    },
    {
      "cve": "CVE-2023-25153",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2023-03-01T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:39cf934468566964e44ddac65928d837528d126d16d5ad6d71298c0570b0066d_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3d2d10adc4f85192a3729477777b068366b5178512724d3ffd6c498ba577d847_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:8aac763313e46322e3d0fbb3fbed767228906f75865d54eb753f03f027408926_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:cbd32c0b082f368583eeff3657a97a79a11ccb5d3bcf5663dd8738d09a0d53e8_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3a7dedb1b1fee0c80dcfe0f3ebce6e20aa6a364fe66808458f5416ae09890c56_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3d4665881548c0808fea1612a972c732c5f2b928ad49fbb8025ceb7f410faabb_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:765efce53826bcdd18c41186fb1fa291e9b1450c43706747d2be1dd5addda19a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:79bd982b6824100b974103347eaaa7f34c60f4b1118c93d7e628bafb11945a17_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:070f43995aae0152eac7d228ae7d4d005eb57e06e14aef1b50d4db64341b826a_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:6c084d7b7609111b8c28d22a7e69d2093607e9a648b7fb7259bcf5693ca35875_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:b36874b30b49a770f223a34034ae128a1a02fe0dfdb16cea5432ed67a24728af_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:decb2f66e30c9500882c35f898e7da4e4d2ee31a7421b9dcab736350c7a5a771_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3c1bbf300b5bd123493c57ffe84ca24bf14fcf32b648cc8c279ad3a3101c19c8_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7256c524d36f6128bffc8fdeec7e9ec435d43ceb57afd1512e496f85a09376f9_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7e7b6ea0214c616e7ef462152854207afe84732c54150914fa6180d8cc29a4ad_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:ed001e7318e45d7c0372b966a8c447eddf75d1079b1b937872c2c12893389849_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:4493b44fc1a487413d554826a92f82a44aca453e8c5d9c476ed47ef3efc1123a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:63eed84d24f949baf09d2294dcc9849e72a6cbe6213844872efb9843898a132f_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:b0ba95a2611c37db8f149d5fe44f424f3ff696535f7e5ac5cbadd45837f864cb_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:db068d24b3055fe96d2fa8703405eca07634238306159e3803ff4ae23f1024fd_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:65f82ec0df5d07b18d73620b7823bf7a51f33c3f3c4c44b290d9cd5f79c8e64a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:86d8a15cc12eaf34d01d077924301ee0276bc2b9539987b1133dc9b65609d660_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:b48486f663889cd57eead6f097d6cc26e6c2ff9bdfbb6f24b8d1f8d2e42a2b4c_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:de99e5235ccf7714e7df2ef04b8c5c60c3efe04cacee13acfbaddaa60c5f88bf_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2174473"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in containerd. When importing an OCI image, there was no limit on the number of bytes read for certain files. A maliciously crafted image with a large file, where a limit was not applied could cause a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "containerd: OCI image importer memory exhaustion",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:044d55095e592d054a5ec69603c1fd8886ea3efcedfd95945dbef3596c9835d5_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9b426d409203a3366689db14f15b0d8639d231945678184c3b43869d56705dbd_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:a1642617a4fc8ff1b79299b160b0f644eeafeb4809981a9d00a3e621ec8bb096_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:bbb4f2499a816032af66bb8b022d8a51198a5db01ee39714800340cbd4a45d40_s390x"
        ],
        "known_not_affected": [
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:39cf934468566964e44ddac65928d837528d126d16d5ad6d71298c0570b0066d_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3d2d10adc4f85192a3729477777b068366b5178512724d3ffd6c498ba577d847_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:8aac763313e46322e3d0fbb3fbed767228906f75865d54eb753f03f027408926_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:cbd32c0b082f368583eeff3657a97a79a11ccb5d3bcf5663dd8738d09a0d53e8_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3a7dedb1b1fee0c80dcfe0f3ebce6e20aa6a364fe66808458f5416ae09890c56_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3d4665881548c0808fea1612a972c732c5f2b928ad49fbb8025ceb7f410faabb_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:765efce53826bcdd18c41186fb1fa291e9b1450c43706747d2be1dd5addda19a_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:79bd982b6824100b974103347eaaa7f34c60f4b1118c93d7e628bafb11945a17_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:070f43995aae0152eac7d228ae7d4d005eb57e06e14aef1b50d4db64341b826a_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:6c084d7b7609111b8c28d22a7e69d2093607e9a648b7fb7259bcf5693ca35875_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:b36874b30b49a770f223a34034ae128a1a02fe0dfdb16cea5432ed67a24728af_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:decb2f66e30c9500882c35f898e7da4e4d2ee31a7421b9dcab736350c7a5a771_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3c1bbf300b5bd123493c57ffe84ca24bf14fcf32b648cc8c279ad3a3101c19c8_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7256c524d36f6128bffc8fdeec7e9ec435d43ceb57afd1512e496f85a09376f9_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7e7b6ea0214c616e7ef462152854207afe84732c54150914fa6180d8cc29a4ad_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:ed001e7318e45d7c0372b966a8c447eddf75d1079b1b937872c2c12893389849_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:4493b44fc1a487413d554826a92f82a44aca453e8c5d9c476ed47ef3efc1123a_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:63eed84d24f949baf09d2294dcc9849e72a6cbe6213844872efb9843898a132f_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:b0ba95a2611c37db8f149d5fe44f424f3ff696535f7e5ac5cbadd45837f864cb_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:db068d24b3055fe96d2fa8703405eca07634238306159e3803ff4ae23f1024fd_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:65f82ec0df5d07b18d73620b7823bf7a51f33c3f3c4c44b290d9cd5f79c8e64a_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:86d8a15cc12eaf34d01d077924301ee0276bc2b9539987b1133dc9b65609d660_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:b48486f663889cd57eead6f097d6cc26e6c2ff9bdfbb6f24b8d1f8d2e42a2b4c_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:de99e5235ccf7714e7df2ef04b8c5c60c3efe04cacee13acfbaddaa60c5f88bf_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-25153"
        },
        {
          "category": "external",
          "summary": "RHBZ#2174473",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2174473"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-25153",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-25153"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-25153",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25153"
        },
        {
          "category": "external",
          "summary": "https://github.com/containerd/containerd/commit/0c314901076a74a7b797a545d2f462285fdbb8c4",
          "url": "https://github.com/containerd/containerd/commit/0c314901076a74a7b797a545d2f462285fdbb8c4"
        },
        {
          "category": "external",
          "summary": "https://github.com/containerd/containerd/releases/tag/v1.5.18",
          "url": "https://github.com/containerd/containerd/releases/tag/v1.5.18"
        },
        {
          "category": "external",
          "summary": "https://github.com/containerd/containerd/releases/tag/v1.6.18",
          "url": "https://github.com/containerd/containerd/releases/tag/v1.6.18"
        },
        {
          "category": "external",
          "summary": "https://github.com/containerd/containerd/security/advisories/GHSA-259w-8hf6-59c2",
          "url": "https://github.com/containerd/containerd/security/advisories/GHSA-259w-8hf6-59c2"
        }
      ],
      "release_date": "2023-02-15T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-01T13:31:31+00:00",
          "details": "The container images provided by this update can be downloaded from the\nRed Hat container registry at registry.redhat.io using the \"podman pull\" command.",
          "product_ids": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:044d55095e592d054a5ec69603c1fd8886ea3efcedfd95945dbef3596c9835d5_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9b426d409203a3366689db14f15b0d8639d231945678184c3b43869d56705dbd_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:a1642617a4fc8ff1b79299b160b0f644eeafeb4809981a9d00a3e621ec8bb096_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:bbb4f2499a816032af66bb8b022d8a51198a5db01ee39714800340cbd4a45d40_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:62115"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:044d55095e592d054a5ec69603c1fd8886ea3efcedfd95945dbef3596c9835d5_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9b426d409203a3366689db14f15b0d8639d231945678184c3b43869d56705dbd_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:a1642617a4fc8ff1b79299b160b0f644eeafeb4809981a9d00a3e621ec8bb096_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:bbb4f2499a816032af66bb8b022d8a51198a5db01ee39714800340cbd4a45d40_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:39cf934468566964e44ddac65928d837528d126d16d5ad6d71298c0570b0066d_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3d2d10adc4f85192a3729477777b068366b5178512724d3ffd6c498ba577d847_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:8aac763313e46322e3d0fbb3fbed767228906f75865d54eb753f03f027408926_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:cbd32c0b082f368583eeff3657a97a79a11ccb5d3bcf5663dd8738d09a0d53e8_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3a7dedb1b1fee0c80dcfe0f3ebce6e20aa6a364fe66808458f5416ae09890c56_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3d4665881548c0808fea1612a972c732c5f2b928ad49fbb8025ceb7f410faabb_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:765efce53826bcdd18c41186fb1fa291e9b1450c43706747d2be1dd5addda19a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:79bd982b6824100b974103347eaaa7f34c60f4b1118c93d7e628bafb11945a17_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:070f43995aae0152eac7d228ae7d4d005eb57e06e14aef1b50d4db64341b826a_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:6c084d7b7609111b8c28d22a7e69d2093607e9a648b7fb7259bcf5693ca35875_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:b36874b30b49a770f223a34034ae128a1a02fe0dfdb16cea5432ed67a24728af_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:decb2f66e30c9500882c35f898e7da4e4d2ee31a7421b9dcab736350c7a5a771_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3c1bbf300b5bd123493c57ffe84ca24bf14fcf32b648cc8c279ad3a3101c19c8_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7256c524d36f6128bffc8fdeec7e9ec435d43ceb57afd1512e496f85a09376f9_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7e7b6ea0214c616e7ef462152854207afe84732c54150914fa6180d8cc29a4ad_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:ed001e7318e45d7c0372b966a8c447eddf75d1079b1b937872c2c12893389849_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:4493b44fc1a487413d554826a92f82a44aca453e8c5d9c476ed47ef3efc1123a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:63eed84d24f949baf09d2294dcc9849e72a6cbe6213844872efb9843898a132f_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:b0ba95a2611c37db8f149d5fe44f424f3ff696535f7e5ac5cbadd45837f864cb_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:db068d24b3055fe96d2fa8703405eca07634238306159e3803ff4ae23f1024fd_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:65f82ec0df5d07b18d73620b7823bf7a51f33c3f3c4c44b290d9cd5f79c8e64a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:86d8a15cc12eaf34d01d077924301ee0276bc2b9539987b1133dc9b65609d660_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:b48486f663889cd57eead6f097d6cc26e6c2ff9bdfbb6f24b8d1f8d2e42a2b4c_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:de99e5235ccf7714e7df2ef04b8c5c60c3efe04cacee13acfbaddaa60c5f88bf_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "containerd: OCI image importer memory exhaustion"
    },
    {
      "cve": "CVE-2023-28155",
      "cwe": {
        "id": "CWE-918",
        "name": "Server-Side Request Forgery (SSRF)"
      },
      "discovery_date": "2025-08-20T21:28:20.747000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:044d55095e592d054a5ec69603c1fd8886ea3efcedfd95945dbef3596c9835d5_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9b426d409203a3366689db14f15b0d8639d231945678184c3b43869d56705dbd_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:a1642617a4fc8ff1b79299b160b0f644eeafeb4809981a9d00a3e621ec8bb096_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:bbb4f2499a816032af66bb8b022d8a51198a5db01ee39714800340cbd4a45d40_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:39cf934468566964e44ddac65928d837528d126d16d5ad6d71298c0570b0066d_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3d2d10adc4f85192a3729477777b068366b5178512724d3ffd6c498ba577d847_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:8aac763313e46322e3d0fbb3fbed767228906f75865d54eb753f03f027408926_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:cbd32c0b082f368583eeff3657a97a79a11ccb5d3bcf5663dd8738d09a0d53e8_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3a7dedb1b1fee0c80dcfe0f3ebce6e20aa6a364fe66808458f5416ae09890c56_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3d4665881548c0808fea1612a972c732c5f2b928ad49fbb8025ceb7f410faabb_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:765efce53826bcdd18c41186fb1fa291e9b1450c43706747d2be1dd5addda19a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:79bd982b6824100b974103347eaaa7f34c60f4b1118c93d7e628bafb11945a17_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3c1bbf300b5bd123493c57ffe84ca24bf14fcf32b648cc8c279ad3a3101c19c8_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7256c524d36f6128bffc8fdeec7e9ec435d43ceb57afd1512e496f85a09376f9_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7e7b6ea0214c616e7ef462152854207afe84732c54150914fa6180d8cc29a4ad_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:ed001e7318e45d7c0372b966a8c447eddf75d1079b1b937872c2c12893389849_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:4493b44fc1a487413d554826a92f82a44aca453e8c5d9c476ed47ef3efc1123a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:63eed84d24f949baf09d2294dcc9849e72a6cbe6213844872efb9843898a132f_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:b0ba95a2611c37db8f149d5fe44f424f3ff696535f7e5ac5cbadd45837f864cb_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:db068d24b3055fe96d2fa8703405eca07634238306159e3803ff4ae23f1024fd_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:65f82ec0df5d07b18d73620b7823bf7a51f33c3f3c4c44b290d9cd5f79c8e64a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:86d8a15cc12eaf34d01d077924301ee0276bc2b9539987b1133dc9b65609d660_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:b48486f663889cd57eead6f097d6cc26e6c2ff9bdfbb6f24b8d1f8d2e42a2b4c_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:de99e5235ccf7714e7df2ef04b8c5c60c3efe04cacee13acfbaddaa60c5f88bf_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2389923"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The Request package through 2.88.1 for Node.js allows a bypass of SSRF mitigations via an attacker-controller server that does a cross-protocol redirect (HTTP to HTTPS, or HTTPS to HTTP).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "request: bypass of SSRF mitigations when following a cross-protocol redirect",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:070f43995aae0152eac7d228ae7d4d005eb57e06e14aef1b50d4db64341b826a_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:6c084d7b7609111b8c28d22a7e69d2093607e9a648b7fb7259bcf5693ca35875_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:b36874b30b49a770f223a34034ae128a1a02fe0dfdb16cea5432ed67a24728af_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:decb2f66e30c9500882c35f898e7da4e4d2ee31a7421b9dcab736350c7a5a771_s390x"
        ],
        "known_not_affected": [
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:044d55095e592d054a5ec69603c1fd8886ea3efcedfd95945dbef3596c9835d5_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9b426d409203a3366689db14f15b0d8639d231945678184c3b43869d56705dbd_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:a1642617a4fc8ff1b79299b160b0f644eeafeb4809981a9d00a3e621ec8bb096_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:bbb4f2499a816032af66bb8b022d8a51198a5db01ee39714800340cbd4a45d40_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:39cf934468566964e44ddac65928d837528d126d16d5ad6d71298c0570b0066d_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3d2d10adc4f85192a3729477777b068366b5178512724d3ffd6c498ba577d847_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:8aac763313e46322e3d0fbb3fbed767228906f75865d54eb753f03f027408926_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:cbd32c0b082f368583eeff3657a97a79a11ccb5d3bcf5663dd8738d09a0d53e8_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3a7dedb1b1fee0c80dcfe0f3ebce6e20aa6a364fe66808458f5416ae09890c56_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3d4665881548c0808fea1612a972c732c5f2b928ad49fbb8025ceb7f410faabb_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:765efce53826bcdd18c41186fb1fa291e9b1450c43706747d2be1dd5addda19a_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:79bd982b6824100b974103347eaaa7f34c60f4b1118c93d7e628bafb11945a17_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3c1bbf300b5bd123493c57ffe84ca24bf14fcf32b648cc8c279ad3a3101c19c8_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7256c524d36f6128bffc8fdeec7e9ec435d43ceb57afd1512e496f85a09376f9_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7e7b6ea0214c616e7ef462152854207afe84732c54150914fa6180d8cc29a4ad_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:ed001e7318e45d7c0372b966a8c447eddf75d1079b1b937872c2c12893389849_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:4493b44fc1a487413d554826a92f82a44aca453e8c5d9c476ed47ef3efc1123a_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:63eed84d24f949baf09d2294dcc9849e72a6cbe6213844872efb9843898a132f_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:b0ba95a2611c37db8f149d5fe44f424f3ff696535f7e5ac5cbadd45837f864cb_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:db068d24b3055fe96d2fa8703405eca07634238306159e3803ff4ae23f1024fd_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:65f82ec0df5d07b18d73620b7823bf7a51f33c3f3c4c44b290d9cd5f79c8e64a_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:86d8a15cc12eaf34d01d077924301ee0276bc2b9539987b1133dc9b65609d660_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:b48486f663889cd57eead6f097d6cc26e6c2ff9bdfbb6f24b8d1f8d2e42a2b4c_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:de99e5235ccf7714e7df2ef04b8c5c60c3efe04cacee13acfbaddaa60c5f88bf_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-28155"
        },
        {
          "category": "external",
          "summary": "RHBZ#2389923",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2389923"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-28155",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-28155"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-28155",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-28155"
        }
      ],
      "release_date": "2023-03-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-01T13:31:31+00:00",
          "details": "The container images provided by this update can be downloaded from the\nRed Hat container registry at registry.redhat.io using the \"podman pull\" command.",
          "product_ids": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:070f43995aae0152eac7d228ae7d4d005eb57e06e14aef1b50d4db64341b826a_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:6c084d7b7609111b8c28d22a7e69d2093607e9a648b7fb7259bcf5693ca35875_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:b36874b30b49a770f223a34034ae128a1a02fe0dfdb16cea5432ed67a24728af_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:decb2f66e30c9500882c35f898e7da4e4d2ee31a7421b9dcab736350c7a5a771_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:62115"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:044d55095e592d054a5ec69603c1fd8886ea3efcedfd95945dbef3596c9835d5_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9b426d409203a3366689db14f15b0d8639d231945678184c3b43869d56705dbd_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:a1642617a4fc8ff1b79299b160b0f644eeafeb4809981a9d00a3e621ec8bb096_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:bbb4f2499a816032af66bb8b022d8a51198a5db01ee39714800340cbd4a45d40_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:39cf934468566964e44ddac65928d837528d126d16d5ad6d71298c0570b0066d_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3d2d10adc4f85192a3729477777b068366b5178512724d3ffd6c498ba577d847_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:8aac763313e46322e3d0fbb3fbed767228906f75865d54eb753f03f027408926_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:cbd32c0b082f368583eeff3657a97a79a11ccb5d3bcf5663dd8738d09a0d53e8_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3a7dedb1b1fee0c80dcfe0f3ebce6e20aa6a364fe66808458f5416ae09890c56_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3d4665881548c0808fea1612a972c732c5f2b928ad49fbb8025ceb7f410faabb_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:765efce53826bcdd18c41186fb1fa291e9b1450c43706747d2be1dd5addda19a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:79bd982b6824100b974103347eaaa7f34c60f4b1118c93d7e628bafb11945a17_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:070f43995aae0152eac7d228ae7d4d005eb57e06e14aef1b50d4db64341b826a_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:6c084d7b7609111b8c28d22a7e69d2093607e9a648b7fb7259bcf5693ca35875_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:b36874b30b49a770f223a34034ae128a1a02fe0dfdb16cea5432ed67a24728af_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:decb2f66e30c9500882c35f898e7da4e4d2ee31a7421b9dcab736350c7a5a771_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3c1bbf300b5bd123493c57ffe84ca24bf14fcf32b648cc8c279ad3a3101c19c8_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7256c524d36f6128bffc8fdeec7e9ec435d43ceb57afd1512e496f85a09376f9_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7e7b6ea0214c616e7ef462152854207afe84732c54150914fa6180d8cc29a4ad_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:ed001e7318e45d7c0372b966a8c447eddf75d1079b1b937872c2c12893389849_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:4493b44fc1a487413d554826a92f82a44aca453e8c5d9c476ed47ef3efc1123a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:63eed84d24f949baf09d2294dcc9849e72a6cbe6213844872efb9843898a132f_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:b0ba95a2611c37db8f149d5fe44f424f3ff696535f7e5ac5cbadd45837f864cb_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:db068d24b3055fe96d2fa8703405eca07634238306159e3803ff4ae23f1024fd_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:65f82ec0df5d07b18d73620b7823bf7a51f33c3f3c4c44b290d9cd5f79c8e64a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:86d8a15cc12eaf34d01d077924301ee0276bc2b9539987b1133dc9b65609d660_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:b48486f663889cd57eead6f097d6cc26e6c2ff9bdfbb6f24b8d1f8d2e42a2b4c_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:de99e5235ccf7714e7df2ef04b8c5c60c3efe04cacee13acfbaddaa60c5f88bf_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "request: bypass of SSRF mitigations when following a cross-protocol redirect"
    },
    {
      "cve": "CVE-2024-11831",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2024-09-16T16:43:32.021000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:044d55095e592d054a5ec69603c1fd8886ea3efcedfd95945dbef3596c9835d5_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9b426d409203a3366689db14f15b0d8639d231945678184c3b43869d56705dbd_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:a1642617a4fc8ff1b79299b160b0f644eeafeb4809981a9d00a3e621ec8bb096_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:bbb4f2499a816032af66bb8b022d8a51198a5db01ee39714800340cbd4a45d40_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:39cf934468566964e44ddac65928d837528d126d16d5ad6d71298c0570b0066d_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3d2d10adc4f85192a3729477777b068366b5178512724d3ffd6c498ba577d847_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:8aac763313e46322e3d0fbb3fbed767228906f75865d54eb753f03f027408926_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:cbd32c0b082f368583eeff3657a97a79a11ccb5d3bcf5663dd8738d09a0d53e8_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3a7dedb1b1fee0c80dcfe0f3ebce6e20aa6a364fe66808458f5416ae09890c56_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3d4665881548c0808fea1612a972c732c5f2b928ad49fbb8025ceb7f410faabb_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:765efce53826bcdd18c41186fb1fa291e9b1450c43706747d2be1dd5addda19a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:79bd982b6824100b974103347eaaa7f34c60f4b1118c93d7e628bafb11945a17_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3c1bbf300b5bd123493c57ffe84ca24bf14fcf32b648cc8c279ad3a3101c19c8_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7256c524d36f6128bffc8fdeec7e9ec435d43ceb57afd1512e496f85a09376f9_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7e7b6ea0214c616e7ef462152854207afe84732c54150914fa6180d8cc29a4ad_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:ed001e7318e45d7c0372b966a8c447eddf75d1079b1b937872c2c12893389849_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:4493b44fc1a487413d554826a92f82a44aca453e8c5d9c476ed47ef3efc1123a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:63eed84d24f949baf09d2294dcc9849e72a6cbe6213844872efb9843898a132f_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:b0ba95a2611c37db8f149d5fe44f424f3ff696535f7e5ac5cbadd45837f864cb_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:db068d24b3055fe96d2fa8703405eca07634238306159e3803ff4ae23f1024fd_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:65f82ec0df5d07b18d73620b7823bf7a51f33c3f3c4c44b290d9cd5f79c8e64a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:86d8a15cc12eaf34d01d077924301ee0276bc2b9539987b1133dc9b65609d660_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:b48486f663889cd57eead6f097d6cc26e6c2ff9bdfbb6f24b8d1f8d2e42a2b4c_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:de99e5235ccf7714e7df2ef04b8c5c60c3efe04cacee13acfbaddaa60c5f88bf_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2312579"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in npm-serialize-javascript. The vulnerability occurs because the serialize-javascript module does not properly sanitize certain inputs, such as regex or other JavaScript object types, allowing an attacker to inject malicious code. This code could be executed when deserialized by a web browser, causing Cross-site scripting (XSS) attacks. This issue is critical in environments where serialized data is sent to web clients, potentially compromising the security of the website or web application using this package.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "npm-serialize-javascript: Cross-site Scripting (XSS) in serialize-javascript",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:070f43995aae0152eac7d228ae7d4d005eb57e06e14aef1b50d4db64341b826a_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:6c084d7b7609111b8c28d22a7e69d2093607e9a648b7fb7259bcf5693ca35875_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:b36874b30b49a770f223a34034ae128a1a02fe0dfdb16cea5432ed67a24728af_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:decb2f66e30c9500882c35f898e7da4e4d2ee31a7421b9dcab736350c7a5a771_s390x"
        ],
        "known_not_affected": [
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:044d55095e592d054a5ec69603c1fd8886ea3efcedfd95945dbef3596c9835d5_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9b426d409203a3366689db14f15b0d8639d231945678184c3b43869d56705dbd_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:a1642617a4fc8ff1b79299b160b0f644eeafeb4809981a9d00a3e621ec8bb096_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:bbb4f2499a816032af66bb8b022d8a51198a5db01ee39714800340cbd4a45d40_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:39cf934468566964e44ddac65928d837528d126d16d5ad6d71298c0570b0066d_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3d2d10adc4f85192a3729477777b068366b5178512724d3ffd6c498ba577d847_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:8aac763313e46322e3d0fbb3fbed767228906f75865d54eb753f03f027408926_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:cbd32c0b082f368583eeff3657a97a79a11ccb5d3bcf5663dd8738d09a0d53e8_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3a7dedb1b1fee0c80dcfe0f3ebce6e20aa6a364fe66808458f5416ae09890c56_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3d4665881548c0808fea1612a972c732c5f2b928ad49fbb8025ceb7f410faabb_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:765efce53826bcdd18c41186fb1fa291e9b1450c43706747d2be1dd5addda19a_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:79bd982b6824100b974103347eaaa7f34c60f4b1118c93d7e628bafb11945a17_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3c1bbf300b5bd123493c57ffe84ca24bf14fcf32b648cc8c279ad3a3101c19c8_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7256c524d36f6128bffc8fdeec7e9ec435d43ceb57afd1512e496f85a09376f9_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7e7b6ea0214c616e7ef462152854207afe84732c54150914fa6180d8cc29a4ad_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:ed001e7318e45d7c0372b966a8c447eddf75d1079b1b937872c2c12893389849_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:4493b44fc1a487413d554826a92f82a44aca453e8c5d9c476ed47ef3efc1123a_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:63eed84d24f949baf09d2294dcc9849e72a6cbe6213844872efb9843898a132f_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:b0ba95a2611c37db8f149d5fe44f424f3ff696535f7e5ac5cbadd45837f864cb_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:db068d24b3055fe96d2fa8703405eca07634238306159e3803ff4ae23f1024fd_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:65f82ec0df5d07b18d73620b7823bf7a51f33c3f3c4c44b290d9cd5f79c8e64a_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:86d8a15cc12eaf34d01d077924301ee0276bc2b9539987b1133dc9b65609d660_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:b48486f663889cd57eead6f097d6cc26e6c2ff9bdfbb6f24b8d1f8d2e42a2b4c_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:de99e5235ccf7714e7df2ef04b8c5c60c3efe04cacee13acfbaddaa60c5f88bf_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-11831"
        },
        {
          "category": "external",
          "summary": "RHBZ#2312579",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2312579"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-11831",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-11831"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-11831",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-11831"
        },
        {
          "category": "external",
          "summary": "https://github.com/yahoo/serialize-javascript/commit/f27d65d3de42affe2aac14607066c293891cec4e",
          "url": "https://github.com/yahoo/serialize-javascript/commit/f27d65d3de42affe2aac14607066c293891cec4e"
        },
        {
          "category": "external",
          "summary": "https://github.com/yahoo/serialize-javascript/pull/173",
          "url": "https://github.com/yahoo/serialize-javascript/pull/173"
        }
      ],
      "release_date": "2024-09-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-01T13:31:31+00:00",
          "details": "The container images provided by this update can be downloaded from the\nRed Hat container registry at registry.redhat.io using the \"podman pull\" command.",
          "product_ids": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:070f43995aae0152eac7d228ae7d4d005eb57e06e14aef1b50d4db64341b826a_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:6c084d7b7609111b8c28d22a7e69d2093607e9a648b7fb7259bcf5693ca35875_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:b36874b30b49a770f223a34034ae128a1a02fe0dfdb16cea5432ed67a24728af_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:decb2f66e30c9500882c35f898e7da4e4d2ee31a7421b9dcab736350c7a5a771_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:62115"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:044d55095e592d054a5ec69603c1fd8886ea3efcedfd95945dbef3596c9835d5_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9b426d409203a3366689db14f15b0d8639d231945678184c3b43869d56705dbd_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:a1642617a4fc8ff1b79299b160b0f644eeafeb4809981a9d00a3e621ec8bb096_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:bbb4f2499a816032af66bb8b022d8a51198a5db01ee39714800340cbd4a45d40_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:39cf934468566964e44ddac65928d837528d126d16d5ad6d71298c0570b0066d_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3d2d10adc4f85192a3729477777b068366b5178512724d3ffd6c498ba577d847_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:8aac763313e46322e3d0fbb3fbed767228906f75865d54eb753f03f027408926_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:cbd32c0b082f368583eeff3657a97a79a11ccb5d3bcf5663dd8738d09a0d53e8_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3a7dedb1b1fee0c80dcfe0f3ebce6e20aa6a364fe66808458f5416ae09890c56_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3d4665881548c0808fea1612a972c732c5f2b928ad49fbb8025ceb7f410faabb_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:765efce53826bcdd18c41186fb1fa291e9b1450c43706747d2be1dd5addda19a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:79bd982b6824100b974103347eaaa7f34c60f4b1118c93d7e628bafb11945a17_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:070f43995aae0152eac7d228ae7d4d005eb57e06e14aef1b50d4db64341b826a_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:6c084d7b7609111b8c28d22a7e69d2093607e9a648b7fb7259bcf5693ca35875_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:b36874b30b49a770f223a34034ae128a1a02fe0dfdb16cea5432ed67a24728af_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:decb2f66e30c9500882c35f898e7da4e4d2ee31a7421b9dcab736350c7a5a771_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3c1bbf300b5bd123493c57ffe84ca24bf14fcf32b648cc8c279ad3a3101c19c8_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7256c524d36f6128bffc8fdeec7e9ec435d43ceb57afd1512e496f85a09376f9_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7e7b6ea0214c616e7ef462152854207afe84732c54150914fa6180d8cc29a4ad_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:ed001e7318e45d7c0372b966a8c447eddf75d1079b1b937872c2c12893389849_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:4493b44fc1a487413d554826a92f82a44aca453e8c5d9c476ed47ef3efc1123a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:63eed84d24f949baf09d2294dcc9849e72a6cbe6213844872efb9843898a132f_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:b0ba95a2611c37db8f149d5fe44f424f3ff696535f7e5ac5cbadd45837f864cb_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:db068d24b3055fe96d2fa8703405eca07634238306159e3803ff4ae23f1024fd_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:65f82ec0df5d07b18d73620b7823bf7a51f33c3f3c4c44b290d9cd5f79c8e64a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:86d8a15cc12eaf34d01d077924301ee0276bc2b9539987b1133dc9b65609d660_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:b48486f663889cd57eead6f097d6cc26e6c2ff9bdfbb6f24b8d1f8d2e42a2b4c_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:de99e5235ccf7714e7df2ef04b8c5c60c3efe04cacee13acfbaddaa60c5f88bf_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:044d55095e592d054a5ec69603c1fd8886ea3efcedfd95945dbef3596c9835d5_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9b426d409203a3366689db14f15b0d8639d231945678184c3b43869d56705dbd_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:a1642617a4fc8ff1b79299b160b0f644eeafeb4809981a9d00a3e621ec8bb096_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:bbb4f2499a816032af66bb8b022d8a51198a5db01ee39714800340cbd4a45d40_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:39cf934468566964e44ddac65928d837528d126d16d5ad6d71298c0570b0066d_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3d2d10adc4f85192a3729477777b068366b5178512724d3ffd6c498ba577d847_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:8aac763313e46322e3d0fbb3fbed767228906f75865d54eb753f03f027408926_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:cbd32c0b082f368583eeff3657a97a79a11ccb5d3bcf5663dd8738d09a0d53e8_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3a7dedb1b1fee0c80dcfe0f3ebce6e20aa6a364fe66808458f5416ae09890c56_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3d4665881548c0808fea1612a972c732c5f2b928ad49fbb8025ceb7f410faabb_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:765efce53826bcdd18c41186fb1fa291e9b1450c43706747d2be1dd5addda19a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:79bd982b6824100b974103347eaaa7f34c60f4b1118c93d7e628bafb11945a17_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:070f43995aae0152eac7d228ae7d4d005eb57e06e14aef1b50d4db64341b826a_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:6c084d7b7609111b8c28d22a7e69d2093607e9a648b7fb7259bcf5693ca35875_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:b36874b30b49a770f223a34034ae128a1a02fe0dfdb16cea5432ed67a24728af_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:decb2f66e30c9500882c35f898e7da4e4d2ee31a7421b9dcab736350c7a5a771_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3c1bbf300b5bd123493c57ffe84ca24bf14fcf32b648cc8c279ad3a3101c19c8_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7256c524d36f6128bffc8fdeec7e9ec435d43ceb57afd1512e496f85a09376f9_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7e7b6ea0214c616e7ef462152854207afe84732c54150914fa6180d8cc29a4ad_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:ed001e7318e45d7c0372b966a8c447eddf75d1079b1b937872c2c12893389849_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:4493b44fc1a487413d554826a92f82a44aca453e8c5d9c476ed47ef3efc1123a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:63eed84d24f949baf09d2294dcc9849e72a6cbe6213844872efb9843898a132f_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:b0ba95a2611c37db8f149d5fe44f424f3ff696535f7e5ac5cbadd45837f864cb_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:db068d24b3055fe96d2fa8703405eca07634238306159e3803ff4ae23f1024fd_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:65f82ec0df5d07b18d73620b7823bf7a51f33c3f3c4c44b290d9cd5f79c8e64a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:86d8a15cc12eaf34d01d077924301ee0276bc2b9539987b1133dc9b65609d660_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:b48486f663889cd57eead6f097d6cc26e6c2ff9bdfbb6f24b8d1f8d2e42a2b4c_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:de99e5235ccf7714e7df2ef04b8c5c60c3efe04cacee13acfbaddaa60c5f88bf_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "npm-serialize-javascript: Cross-site Scripting (XSS) in serialize-javascript"
    },
    {
      "cve": "CVE-2025-50181",
      "cwe": {
        "id": "CWE-601",
        "name": "URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)"
      },
      "discovery_date": "2025-06-19T02:00:42.866992+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:39cf934468566964e44ddac65928d837528d126d16d5ad6d71298c0570b0066d_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3d2d10adc4f85192a3729477777b068366b5178512724d3ffd6c498ba577d847_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:8aac763313e46322e3d0fbb3fbed767228906f75865d54eb753f03f027408926_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:cbd32c0b082f368583eeff3657a97a79a11ccb5d3bcf5663dd8738d09a0d53e8_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3a7dedb1b1fee0c80dcfe0f3ebce6e20aa6a364fe66808458f5416ae09890c56_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3d4665881548c0808fea1612a972c732c5f2b928ad49fbb8025ceb7f410faabb_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:765efce53826bcdd18c41186fb1fa291e9b1450c43706747d2be1dd5addda19a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:79bd982b6824100b974103347eaaa7f34c60f4b1118c93d7e628bafb11945a17_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:070f43995aae0152eac7d228ae7d4d005eb57e06e14aef1b50d4db64341b826a_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:6c084d7b7609111b8c28d22a7e69d2093607e9a648b7fb7259bcf5693ca35875_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:b36874b30b49a770f223a34034ae128a1a02fe0dfdb16cea5432ed67a24728af_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:decb2f66e30c9500882c35f898e7da4e4d2ee31a7421b9dcab736350c7a5a771_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3c1bbf300b5bd123493c57ffe84ca24bf14fcf32b648cc8c279ad3a3101c19c8_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7256c524d36f6128bffc8fdeec7e9ec435d43ceb57afd1512e496f85a09376f9_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7e7b6ea0214c616e7ef462152854207afe84732c54150914fa6180d8cc29a4ad_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:ed001e7318e45d7c0372b966a8c447eddf75d1079b1b937872c2c12893389849_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:4493b44fc1a487413d554826a92f82a44aca453e8c5d9c476ed47ef3efc1123a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:63eed84d24f949baf09d2294dcc9849e72a6cbe6213844872efb9843898a132f_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:b0ba95a2611c37db8f149d5fe44f424f3ff696535f7e5ac5cbadd45837f864cb_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:db068d24b3055fe96d2fa8703405eca07634238306159e3803ff4ae23f1024fd_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:65f82ec0df5d07b18d73620b7823bf7a51f33c3f3c4c44b290d9cd5f79c8e64a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:86d8a15cc12eaf34d01d077924301ee0276bc2b9539987b1133dc9b65609d660_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:b48486f663889cd57eead6f097d6cc26e6c2ff9bdfbb6f24b8d1f8d2e42a2b4c_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:de99e5235ccf7714e7df2ef04b8c5c60c3efe04cacee13acfbaddaa60c5f88bf_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2373799"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in urllib3. The `PoolManager` class allows redirects to be disabled by configuring retries in a specific manner, effectively bypassing intended HTTP redirection behavior. A network attacker can leverage this configuration to manipulate request flows and disrupt service. This bypass occurs through improper handling of retry parameters during PoolManager instantiation. This issue can reult in a denial of service or unintended data exposure due to altered request destinations.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "urllib3: urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw was found in the urllib3 library where it could be tricked into disclosing the Proxy-Authorization header to a destination server when a CONNECT tunnel is used. An attacker can set up a malicious redirect to a crafted URL, which, when followed by the client application, will cause the Proxy-Authorization header to be sent to the attacker-controlled server. This leaks sensitive credentials for the proxy. The impact is primarily on confidentiality. While urllib3 is a ubiquitous component, the vulnerability requires a specific scenario where a user is connecting to a proxy that requires authentication and is redirected to a malicious endpoint. This lowers the exploitability compared to a direct, unauthenticated remote attack, thus, warranting a Moderate severity rating.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:044d55095e592d054a5ec69603c1fd8886ea3efcedfd95945dbef3596c9835d5_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9b426d409203a3366689db14f15b0d8639d231945678184c3b43869d56705dbd_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:a1642617a4fc8ff1b79299b160b0f644eeafeb4809981a9d00a3e621ec8bb096_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:bbb4f2499a816032af66bb8b022d8a51198a5db01ee39714800340cbd4a45d40_s390x"
        ],
        "known_not_affected": [
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:39cf934468566964e44ddac65928d837528d126d16d5ad6d71298c0570b0066d_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3d2d10adc4f85192a3729477777b068366b5178512724d3ffd6c498ba577d847_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:8aac763313e46322e3d0fbb3fbed767228906f75865d54eb753f03f027408926_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:cbd32c0b082f368583eeff3657a97a79a11ccb5d3bcf5663dd8738d09a0d53e8_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3a7dedb1b1fee0c80dcfe0f3ebce6e20aa6a364fe66808458f5416ae09890c56_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3d4665881548c0808fea1612a972c732c5f2b928ad49fbb8025ceb7f410faabb_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:765efce53826bcdd18c41186fb1fa291e9b1450c43706747d2be1dd5addda19a_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:79bd982b6824100b974103347eaaa7f34c60f4b1118c93d7e628bafb11945a17_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:070f43995aae0152eac7d228ae7d4d005eb57e06e14aef1b50d4db64341b826a_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:6c084d7b7609111b8c28d22a7e69d2093607e9a648b7fb7259bcf5693ca35875_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:b36874b30b49a770f223a34034ae128a1a02fe0dfdb16cea5432ed67a24728af_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:decb2f66e30c9500882c35f898e7da4e4d2ee31a7421b9dcab736350c7a5a771_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3c1bbf300b5bd123493c57ffe84ca24bf14fcf32b648cc8c279ad3a3101c19c8_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7256c524d36f6128bffc8fdeec7e9ec435d43ceb57afd1512e496f85a09376f9_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7e7b6ea0214c616e7ef462152854207afe84732c54150914fa6180d8cc29a4ad_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:ed001e7318e45d7c0372b966a8c447eddf75d1079b1b937872c2c12893389849_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:4493b44fc1a487413d554826a92f82a44aca453e8c5d9c476ed47ef3efc1123a_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:63eed84d24f949baf09d2294dcc9849e72a6cbe6213844872efb9843898a132f_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:b0ba95a2611c37db8f149d5fe44f424f3ff696535f7e5ac5cbadd45837f864cb_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:db068d24b3055fe96d2fa8703405eca07634238306159e3803ff4ae23f1024fd_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:65f82ec0df5d07b18d73620b7823bf7a51f33c3f3c4c44b290d9cd5f79c8e64a_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:86d8a15cc12eaf34d01d077924301ee0276bc2b9539987b1133dc9b65609d660_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:b48486f663889cd57eead6f097d6cc26e6c2ff9bdfbb6f24b8d1f8d2e42a2b4c_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:de99e5235ccf7714e7df2ef04b8c5c60c3efe04cacee13acfbaddaa60c5f88bf_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-50181"
        },
        {
          "category": "external",
          "summary": "RHBZ#2373799",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2373799"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-50181",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-50181"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-50181",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-50181"
        },
        {
          "category": "external",
          "summary": "https://github.com/urllib3/urllib3/commit/f05b1329126d5be6de501f9d1e3e36738bc08857",
          "url": "https://github.com/urllib3/urllib3/commit/f05b1329126d5be6de501f9d1e3e36738bc08857"
        },
        {
          "category": "external",
          "summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-pq67-6m6q-mj2v",
          "url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-pq67-6m6q-mj2v"
        }
      ],
      "release_date": "2025-06-19T01:08:00.340000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-01T13:31:31+00:00",
          "details": "The container images provided by this update can be downloaded from the\nRed Hat container registry at registry.redhat.io using the \"podman pull\" command.",
          "product_ids": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:044d55095e592d054a5ec69603c1fd8886ea3efcedfd95945dbef3596c9835d5_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9b426d409203a3366689db14f15b0d8639d231945678184c3b43869d56705dbd_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:a1642617a4fc8ff1b79299b160b0f644eeafeb4809981a9d00a3e621ec8bb096_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:bbb4f2499a816032af66bb8b022d8a51198a5db01ee39714800340cbd4a45d40_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:62115"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:044d55095e592d054a5ec69603c1fd8886ea3efcedfd95945dbef3596c9835d5_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9b426d409203a3366689db14f15b0d8639d231945678184c3b43869d56705dbd_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:a1642617a4fc8ff1b79299b160b0f644eeafeb4809981a9d00a3e621ec8bb096_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:bbb4f2499a816032af66bb8b022d8a51198a5db01ee39714800340cbd4a45d40_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:39cf934468566964e44ddac65928d837528d126d16d5ad6d71298c0570b0066d_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3d2d10adc4f85192a3729477777b068366b5178512724d3ffd6c498ba577d847_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:8aac763313e46322e3d0fbb3fbed767228906f75865d54eb753f03f027408926_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:cbd32c0b082f368583eeff3657a97a79a11ccb5d3bcf5663dd8738d09a0d53e8_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3a7dedb1b1fee0c80dcfe0f3ebce6e20aa6a364fe66808458f5416ae09890c56_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3d4665881548c0808fea1612a972c732c5f2b928ad49fbb8025ceb7f410faabb_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:765efce53826bcdd18c41186fb1fa291e9b1450c43706747d2be1dd5addda19a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:79bd982b6824100b974103347eaaa7f34c60f4b1118c93d7e628bafb11945a17_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:070f43995aae0152eac7d228ae7d4d005eb57e06e14aef1b50d4db64341b826a_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:6c084d7b7609111b8c28d22a7e69d2093607e9a648b7fb7259bcf5693ca35875_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:b36874b30b49a770f223a34034ae128a1a02fe0dfdb16cea5432ed67a24728af_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:decb2f66e30c9500882c35f898e7da4e4d2ee31a7421b9dcab736350c7a5a771_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3c1bbf300b5bd123493c57ffe84ca24bf14fcf32b648cc8c279ad3a3101c19c8_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7256c524d36f6128bffc8fdeec7e9ec435d43ceb57afd1512e496f85a09376f9_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7e7b6ea0214c616e7ef462152854207afe84732c54150914fa6180d8cc29a4ad_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:ed001e7318e45d7c0372b966a8c447eddf75d1079b1b937872c2c12893389849_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:4493b44fc1a487413d554826a92f82a44aca453e8c5d9c476ed47ef3efc1123a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:63eed84d24f949baf09d2294dcc9849e72a6cbe6213844872efb9843898a132f_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:b0ba95a2611c37db8f149d5fe44f424f3ff696535f7e5ac5cbadd45837f864cb_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:db068d24b3055fe96d2fa8703405eca07634238306159e3803ff4ae23f1024fd_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:65f82ec0df5d07b18d73620b7823bf7a51f33c3f3c4c44b290d9cd5f79c8e64a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:86d8a15cc12eaf34d01d077924301ee0276bc2b9539987b1133dc9b65609d660_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:b48486f663889cd57eead6f097d6cc26e6c2ff9bdfbb6f24b8d1f8d2e42a2b4c_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:de99e5235ccf7714e7df2ef04b8c5c60c3efe04cacee13acfbaddaa60c5f88bf_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:044d55095e592d054a5ec69603c1fd8886ea3efcedfd95945dbef3596c9835d5_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9b426d409203a3366689db14f15b0d8639d231945678184c3b43869d56705dbd_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:a1642617a4fc8ff1b79299b160b0f644eeafeb4809981a9d00a3e621ec8bb096_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:bbb4f2499a816032af66bb8b022d8a51198a5db01ee39714800340cbd4a45d40_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:39cf934468566964e44ddac65928d837528d126d16d5ad6d71298c0570b0066d_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3d2d10adc4f85192a3729477777b068366b5178512724d3ffd6c498ba577d847_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:8aac763313e46322e3d0fbb3fbed767228906f75865d54eb753f03f027408926_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:cbd32c0b082f368583eeff3657a97a79a11ccb5d3bcf5663dd8738d09a0d53e8_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3a7dedb1b1fee0c80dcfe0f3ebce6e20aa6a364fe66808458f5416ae09890c56_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3d4665881548c0808fea1612a972c732c5f2b928ad49fbb8025ceb7f410faabb_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:765efce53826bcdd18c41186fb1fa291e9b1450c43706747d2be1dd5addda19a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:79bd982b6824100b974103347eaaa7f34c60f4b1118c93d7e628bafb11945a17_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:070f43995aae0152eac7d228ae7d4d005eb57e06e14aef1b50d4db64341b826a_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:6c084d7b7609111b8c28d22a7e69d2093607e9a648b7fb7259bcf5693ca35875_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:b36874b30b49a770f223a34034ae128a1a02fe0dfdb16cea5432ed67a24728af_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:decb2f66e30c9500882c35f898e7da4e4d2ee31a7421b9dcab736350c7a5a771_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3c1bbf300b5bd123493c57ffe84ca24bf14fcf32b648cc8c279ad3a3101c19c8_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7256c524d36f6128bffc8fdeec7e9ec435d43ceb57afd1512e496f85a09376f9_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7e7b6ea0214c616e7ef462152854207afe84732c54150914fa6180d8cc29a4ad_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:ed001e7318e45d7c0372b966a8c447eddf75d1079b1b937872c2c12893389849_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:4493b44fc1a487413d554826a92f82a44aca453e8c5d9c476ed47ef3efc1123a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:63eed84d24f949baf09d2294dcc9849e72a6cbe6213844872efb9843898a132f_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:b0ba95a2611c37db8f149d5fe44f424f3ff696535f7e5ac5cbadd45837f864cb_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:db068d24b3055fe96d2fa8703405eca07634238306159e3803ff4ae23f1024fd_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:65f82ec0df5d07b18d73620b7823bf7a51f33c3f3c4c44b290d9cd5f79c8e64a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:86d8a15cc12eaf34d01d077924301ee0276bc2b9539987b1133dc9b65609d660_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:b48486f663889cd57eead6f097d6cc26e6c2ff9bdfbb6f24b8d1f8d2e42a2b4c_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:de99e5235ccf7714e7df2ef04b8c5c60c3efe04cacee13acfbaddaa60c5f88bf_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "urllib3: urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation"
    },
    {
      "cve": "CVE-2025-50182",
      "cwe": {
        "id": "CWE-601",
        "name": "URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)"
      },
      "discovery_date": "2025-06-19T02:00:45.813042+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:39cf934468566964e44ddac65928d837528d126d16d5ad6d71298c0570b0066d_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3d2d10adc4f85192a3729477777b068366b5178512724d3ffd6c498ba577d847_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:8aac763313e46322e3d0fbb3fbed767228906f75865d54eb753f03f027408926_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:cbd32c0b082f368583eeff3657a97a79a11ccb5d3bcf5663dd8738d09a0d53e8_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3a7dedb1b1fee0c80dcfe0f3ebce6e20aa6a364fe66808458f5416ae09890c56_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3d4665881548c0808fea1612a972c732c5f2b928ad49fbb8025ceb7f410faabb_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:765efce53826bcdd18c41186fb1fa291e9b1450c43706747d2be1dd5addda19a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:79bd982b6824100b974103347eaaa7f34c60f4b1118c93d7e628bafb11945a17_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:070f43995aae0152eac7d228ae7d4d005eb57e06e14aef1b50d4db64341b826a_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:6c084d7b7609111b8c28d22a7e69d2093607e9a648b7fb7259bcf5693ca35875_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:b36874b30b49a770f223a34034ae128a1a02fe0dfdb16cea5432ed67a24728af_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:decb2f66e30c9500882c35f898e7da4e4d2ee31a7421b9dcab736350c7a5a771_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3c1bbf300b5bd123493c57ffe84ca24bf14fcf32b648cc8c279ad3a3101c19c8_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7256c524d36f6128bffc8fdeec7e9ec435d43ceb57afd1512e496f85a09376f9_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7e7b6ea0214c616e7ef462152854207afe84732c54150914fa6180d8cc29a4ad_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:ed001e7318e45d7c0372b966a8c447eddf75d1079b1b937872c2c12893389849_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:4493b44fc1a487413d554826a92f82a44aca453e8c5d9c476ed47ef3efc1123a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:63eed84d24f949baf09d2294dcc9849e72a6cbe6213844872efb9843898a132f_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:b0ba95a2611c37db8f149d5fe44f424f3ff696535f7e5ac5cbadd45837f864cb_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:db068d24b3055fe96d2fa8703405eca07634238306159e3803ff4ae23f1024fd_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:65f82ec0df5d07b18d73620b7823bf7a51f33c3f3c4c44b290d9cd5f79c8e64a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:86d8a15cc12eaf34d01d077924301ee0276bc2b9539987b1133dc9b65609d660_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:b48486f663889cd57eead6f097d6cc26e6c2ff9bdfbb6f24b8d1f8d2e42a2b4c_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:de99e5235ccf7714e7df2ef04b8c5c60c3efe04cacee13acfbaddaa60c5f88bf_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2373800"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in urllib3. The library fails to properly validate redirect URLs, allowing an attacker to manipulate redirect chains when used in environments like Pyodide utilizing the JavaScript Fetch API. This lack of validation can enable a remote attacker to control the redirect destination, leading to arbitrary URL redirection. Consequently, an attacker can redirect users to malicious websites. This \nvulnerability stems from a failure to constrain the redirect target.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "urllib3: urllib3 does not control redirects in browsers and Node.js",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The vulnerability lies in the urllib3 library\u0027s inability to control HTTP redirects when executed within a Pyodide runtime. This can lead to Server-Side Request Forgery (SSRF) attacks, where an attacker can induce the application to make requests to unintended internal or external resources. While urllib3 is a ubiquitous library in the Python ecosystem and is present in many Red Hat products, the vulnerability is specific to its use within the less common Pyodide (Python in a browser) environment. The attack complexity is high as it requires a specific application context where user-supplied input is used to construct a request URL in a Pyodide-based application that also attempts to mitigate SSRF by disabling redirects. The impact is primarily on confidentiality, as a successful exploit could lead to the disclosure of sensitive information from the server\u0027s local network. Given the specific and less common configuration required for exploitation, the severity is rated as Moderate.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:044d55095e592d054a5ec69603c1fd8886ea3efcedfd95945dbef3596c9835d5_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9b426d409203a3366689db14f15b0d8639d231945678184c3b43869d56705dbd_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:a1642617a4fc8ff1b79299b160b0f644eeafeb4809981a9d00a3e621ec8bb096_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:bbb4f2499a816032af66bb8b022d8a51198a5db01ee39714800340cbd4a45d40_s390x"
        ],
        "known_not_affected": [
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:39cf934468566964e44ddac65928d837528d126d16d5ad6d71298c0570b0066d_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3d2d10adc4f85192a3729477777b068366b5178512724d3ffd6c498ba577d847_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:8aac763313e46322e3d0fbb3fbed767228906f75865d54eb753f03f027408926_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:cbd32c0b082f368583eeff3657a97a79a11ccb5d3bcf5663dd8738d09a0d53e8_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3a7dedb1b1fee0c80dcfe0f3ebce6e20aa6a364fe66808458f5416ae09890c56_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3d4665881548c0808fea1612a972c732c5f2b928ad49fbb8025ceb7f410faabb_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:765efce53826bcdd18c41186fb1fa291e9b1450c43706747d2be1dd5addda19a_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:79bd982b6824100b974103347eaaa7f34c60f4b1118c93d7e628bafb11945a17_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:070f43995aae0152eac7d228ae7d4d005eb57e06e14aef1b50d4db64341b826a_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:6c084d7b7609111b8c28d22a7e69d2093607e9a648b7fb7259bcf5693ca35875_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:b36874b30b49a770f223a34034ae128a1a02fe0dfdb16cea5432ed67a24728af_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:decb2f66e30c9500882c35f898e7da4e4d2ee31a7421b9dcab736350c7a5a771_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3c1bbf300b5bd123493c57ffe84ca24bf14fcf32b648cc8c279ad3a3101c19c8_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7256c524d36f6128bffc8fdeec7e9ec435d43ceb57afd1512e496f85a09376f9_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7e7b6ea0214c616e7ef462152854207afe84732c54150914fa6180d8cc29a4ad_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:ed001e7318e45d7c0372b966a8c447eddf75d1079b1b937872c2c12893389849_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:4493b44fc1a487413d554826a92f82a44aca453e8c5d9c476ed47ef3efc1123a_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:63eed84d24f949baf09d2294dcc9849e72a6cbe6213844872efb9843898a132f_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:b0ba95a2611c37db8f149d5fe44f424f3ff696535f7e5ac5cbadd45837f864cb_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:db068d24b3055fe96d2fa8703405eca07634238306159e3803ff4ae23f1024fd_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:65f82ec0df5d07b18d73620b7823bf7a51f33c3f3c4c44b290d9cd5f79c8e64a_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:86d8a15cc12eaf34d01d077924301ee0276bc2b9539987b1133dc9b65609d660_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:b48486f663889cd57eead6f097d6cc26e6c2ff9bdfbb6f24b8d1f8d2e42a2b4c_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:de99e5235ccf7714e7df2ef04b8c5c60c3efe04cacee13acfbaddaa60c5f88bf_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-50182"
        },
        {
          "category": "external",
          "summary": "RHBZ#2373800",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2373800"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-50182",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-50182"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-50182",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-50182"
        },
        {
          "category": "external",
          "summary": "https://github.com/urllib3/urllib3/commit/7eb4a2aafe49a279c29b6d1f0ed0f42e9736194f",
          "url": "https://github.com/urllib3/urllib3/commit/7eb4a2aafe49a279c29b6d1f0ed0f42e9736194f"
        },
        {
          "category": "external",
          "summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-48p4-8xcf-vxj5",
          "url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-48p4-8xcf-vxj5"
        }
      ],
      "release_date": "2025-06-19T01:42:44.921000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-01T13:31:31+00:00",
          "details": "The container images provided by this update can be downloaded from the\nRed Hat container registry at registry.redhat.io using the \"podman pull\" command.",
          "product_ids": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:044d55095e592d054a5ec69603c1fd8886ea3efcedfd95945dbef3596c9835d5_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9b426d409203a3366689db14f15b0d8639d231945678184c3b43869d56705dbd_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:a1642617a4fc8ff1b79299b160b0f644eeafeb4809981a9d00a3e621ec8bb096_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:bbb4f2499a816032af66bb8b022d8a51198a5db01ee39714800340cbd4a45d40_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:62115"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:044d55095e592d054a5ec69603c1fd8886ea3efcedfd95945dbef3596c9835d5_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9b426d409203a3366689db14f15b0d8639d231945678184c3b43869d56705dbd_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:a1642617a4fc8ff1b79299b160b0f644eeafeb4809981a9d00a3e621ec8bb096_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:bbb4f2499a816032af66bb8b022d8a51198a5db01ee39714800340cbd4a45d40_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:39cf934468566964e44ddac65928d837528d126d16d5ad6d71298c0570b0066d_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3d2d10adc4f85192a3729477777b068366b5178512724d3ffd6c498ba577d847_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:8aac763313e46322e3d0fbb3fbed767228906f75865d54eb753f03f027408926_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:cbd32c0b082f368583eeff3657a97a79a11ccb5d3bcf5663dd8738d09a0d53e8_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3a7dedb1b1fee0c80dcfe0f3ebce6e20aa6a364fe66808458f5416ae09890c56_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3d4665881548c0808fea1612a972c732c5f2b928ad49fbb8025ceb7f410faabb_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:765efce53826bcdd18c41186fb1fa291e9b1450c43706747d2be1dd5addda19a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:79bd982b6824100b974103347eaaa7f34c60f4b1118c93d7e628bafb11945a17_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:070f43995aae0152eac7d228ae7d4d005eb57e06e14aef1b50d4db64341b826a_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:6c084d7b7609111b8c28d22a7e69d2093607e9a648b7fb7259bcf5693ca35875_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:b36874b30b49a770f223a34034ae128a1a02fe0dfdb16cea5432ed67a24728af_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:decb2f66e30c9500882c35f898e7da4e4d2ee31a7421b9dcab736350c7a5a771_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3c1bbf300b5bd123493c57ffe84ca24bf14fcf32b648cc8c279ad3a3101c19c8_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7256c524d36f6128bffc8fdeec7e9ec435d43ceb57afd1512e496f85a09376f9_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7e7b6ea0214c616e7ef462152854207afe84732c54150914fa6180d8cc29a4ad_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:ed001e7318e45d7c0372b966a8c447eddf75d1079b1b937872c2c12893389849_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:4493b44fc1a487413d554826a92f82a44aca453e8c5d9c476ed47ef3efc1123a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:63eed84d24f949baf09d2294dcc9849e72a6cbe6213844872efb9843898a132f_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:b0ba95a2611c37db8f149d5fe44f424f3ff696535f7e5ac5cbadd45837f864cb_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:db068d24b3055fe96d2fa8703405eca07634238306159e3803ff4ae23f1024fd_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:65f82ec0df5d07b18d73620b7823bf7a51f33c3f3c4c44b290d9cd5f79c8e64a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:86d8a15cc12eaf34d01d077924301ee0276bc2b9539987b1133dc9b65609d660_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:b48486f663889cd57eead6f097d6cc26e6c2ff9bdfbb6f24b8d1f8d2e42a2b4c_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:de99e5235ccf7714e7df2ef04b8c5c60c3efe04cacee13acfbaddaa60c5f88bf_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:044d55095e592d054a5ec69603c1fd8886ea3efcedfd95945dbef3596c9835d5_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9b426d409203a3366689db14f15b0d8639d231945678184c3b43869d56705dbd_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:a1642617a4fc8ff1b79299b160b0f644eeafeb4809981a9d00a3e621ec8bb096_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:bbb4f2499a816032af66bb8b022d8a51198a5db01ee39714800340cbd4a45d40_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:39cf934468566964e44ddac65928d837528d126d16d5ad6d71298c0570b0066d_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3d2d10adc4f85192a3729477777b068366b5178512724d3ffd6c498ba577d847_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:8aac763313e46322e3d0fbb3fbed767228906f75865d54eb753f03f027408926_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:cbd32c0b082f368583eeff3657a97a79a11ccb5d3bcf5663dd8738d09a0d53e8_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3a7dedb1b1fee0c80dcfe0f3ebce6e20aa6a364fe66808458f5416ae09890c56_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3d4665881548c0808fea1612a972c732c5f2b928ad49fbb8025ceb7f410faabb_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:765efce53826bcdd18c41186fb1fa291e9b1450c43706747d2be1dd5addda19a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:79bd982b6824100b974103347eaaa7f34c60f4b1118c93d7e628bafb11945a17_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:070f43995aae0152eac7d228ae7d4d005eb57e06e14aef1b50d4db64341b826a_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:6c084d7b7609111b8c28d22a7e69d2093607e9a648b7fb7259bcf5693ca35875_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:b36874b30b49a770f223a34034ae128a1a02fe0dfdb16cea5432ed67a24728af_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:decb2f66e30c9500882c35f898e7da4e4d2ee31a7421b9dcab736350c7a5a771_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3c1bbf300b5bd123493c57ffe84ca24bf14fcf32b648cc8c279ad3a3101c19c8_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7256c524d36f6128bffc8fdeec7e9ec435d43ceb57afd1512e496f85a09376f9_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7e7b6ea0214c616e7ef462152854207afe84732c54150914fa6180d8cc29a4ad_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:ed001e7318e45d7c0372b966a8c447eddf75d1079b1b937872c2c12893389849_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:4493b44fc1a487413d554826a92f82a44aca453e8c5d9c476ed47ef3efc1123a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:63eed84d24f949baf09d2294dcc9849e72a6cbe6213844872efb9843898a132f_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:b0ba95a2611c37db8f149d5fe44f424f3ff696535f7e5ac5cbadd45837f864cb_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:db068d24b3055fe96d2fa8703405eca07634238306159e3803ff4ae23f1024fd_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:65f82ec0df5d07b18d73620b7823bf7a51f33c3f3c4c44b290d9cd5f79c8e64a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:86d8a15cc12eaf34d01d077924301ee0276bc2b9539987b1133dc9b65609d660_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:b48486f663889cd57eead6f097d6cc26e6c2ff9bdfbb6f24b8d1f8d2e42a2b4c_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:de99e5235ccf7714e7df2ef04b8c5c60c3efe04cacee13acfbaddaa60c5f88bf_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "urllib3: urllib3 does not control redirects in browsers and Node.js"
    },
    {
      "cve": "CVE-2025-59436",
      "cwe": {
        "id": "CWE-918",
        "name": "Server-Side Request Forgery (SSRF)"
      },
      "discovery_date": "2025-09-16T03:00:42.722078+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:044d55095e592d054a5ec69603c1fd8886ea3efcedfd95945dbef3596c9835d5_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9b426d409203a3366689db14f15b0d8639d231945678184c3b43869d56705dbd_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:a1642617a4fc8ff1b79299b160b0f644eeafeb4809981a9d00a3e621ec8bb096_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:bbb4f2499a816032af66bb8b022d8a51198a5db01ee39714800340cbd4a45d40_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:39cf934468566964e44ddac65928d837528d126d16d5ad6d71298c0570b0066d_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3d2d10adc4f85192a3729477777b068366b5178512724d3ffd6c498ba577d847_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:8aac763313e46322e3d0fbb3fbed767228906f75865d54eb753f03f027408926_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:cbd32c0b082f368583eeff3657a97a79a11ccb5d3bcf5663dd8738d09a0d53e8_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3a7dedb1b1fee0c80dcfe0f3ebce6e20aa6a364fe66808458f5416ae09890c56_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3d4665881548c0808fea1612a972c732c5f2b928ad49fbb8025ceb7f410faabb_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:765efce53826bcdd18c41186fb1fa291e9b1450c43706747d2be1dd5addda19a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:79bd982b6824100b974103347eaaa7f34c60f4b1118c93d7e628bafb11945a17_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3c1bbf300b5bd123493c57ffe84ca24bf14fcf32b648cc8c279ad3a3101c19c8_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7256c524d36f6128bffc8fdeec7e9ec435d43ceb57afd1512e496f85a09376f9_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7e7b6ea0214c616e7ef462152854207afe84732c54150914fa6180d8cc29a4ad_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:ed001e7318e45d7c0372b966a8c447eddf75d1079b1b937872c2c12893389849_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:4493b44fc1a487413d554826a92f82a44aca453e8c5d9c476ed47ef3efc1123a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:63eed84d24f949baf09d2294dcc9849e72a6cbe6213844872efb9843898a132f_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:b0ba95a2611c37db8f149d5fe44f424f3ff696535f7e5ac5cbadd45837f864cb_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:db068d24b3055fe96d2fa8703405eca07634238306159e3803ff4ae23f1024fd_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:65f82ec0df5d07b18d73620b7823bf7a51f33c3f3c4c44b290d9cd5f79c8e64a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:86d8a15cc12eaf34d01d077924301ee0276bc2b9539987b1133dc9b65609d660_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:b48486f663889cd57eead6f097d6cc26e6c2ff9bdfbb6f24b8d1f8d2e42a2b4c_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:de99e5235ccf7714e7df2ef04b8c5c60c3efe04cacee13acfbaddaa60c5f88bf_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2395629"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A potential SSRF vector has been discovered in the node ip package (ip on npm). The issue is that the value `0` is improperly categorized as globally routable via the isPublic function.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "ip: Node ip SSRF",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:070f43995aae0152eac7d228ae7d4d005eb57e06e14aef1b50d4db64341b826a_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:6c084d7b7609111b8c28d22a7e69d2093607e9a648b7fb7259bcf5693ca35875_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:b36874b30b49a770f223a34034ae128a1a02fe0dfdb16cea5432ed67a24728af_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:decb2f66e30c9500882c35f898e7da4e4d2ee31a7421b9dcab736350c7a5a771_s390x"
        ],
        "known_not_affected": [
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:044d55095e592d054a5ec69603c1fd8886ea3efcedfd95945dbef3596c9835d5_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9b426d409203a3366689db14f15b0d8639d231945678184c3b43869d56705dbd_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:a1642617a4fc8ff1b79299b160b0f644eeafeb4809981a9d00a3e621ec8bb096_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:bbb4f2499a816032af66bb8b022d8a51198a5db01ee39714800340cbd4a45d40_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:39cf934468566964e44ddac65928d837528d126d16d5ad6d71298c0570b0066d_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3d2d10adc4f85192a3729477777b068366b5178512724d3ffd6c498ba577d847_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:8aac763313e46322e3d0fbb3fbed767228906f75865d54eb753f03f027408926_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:cbd32c0b082f368583eeff3657a97a79a11ccb5d3bcf5663dd8738d09a0d53e8_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3a7dedb1b1fee0c80dcfe0f3ebce6e20aa6a364fe66808458f5416ae09890c56_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3d4665881548c0808fea1612a972c732c5f2b928ad49fbb8025ceb7f410faabb_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:765efce53826bcdd18c41186fb1fa291e9b1450c43706747d2be1dd5addda19a_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:79bd982b6824100b974103347eaaa7f34c60f4b1118c93d7e628bafb11945a17_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3c1bbf300b5bd123493c57ffe84ca24bf14fcf32b648cc8c279ad3a3101c19c8_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7256c524d36f6128bffc8fdeec7e9ec435d43ceb57afd1512e496f85a09376f9_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7e7b6ea0214c616e7ef462152854207afe84732c54150914fa6180d8cc29a4ad_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:ed001e7318e45d7c0372b966a8c447eddf75d1079b1b937872c2c12893389849_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:4493b44fc1a487413d554826a92f82a44aca453e8c5d9c476ed47ef3efc1123a_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:63eed84d24f949baf09d2294dcc9849e72a6cbe6213844872efb9843898a132f_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:b0ba95a2611c37db8f149d5fe44f424f3ff696535f7e5ac5cbadd45837f864cb_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:db068d24b3055fe96d2fa8703405eca07634238306159e3803ff4ae23f1024fd_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:65f82ec0df5d07b18d73620b7823bf7a51f33c3f3c4c44b290d9cd5f79c8e64a_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:86d8a15cc12eaf34d01d077924301ee0276bc2b9539987b1133dc9b65609d660_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:b48486f663889cd57eead6f097d6cc26e6c2ff9bdfbb6f24b8d1f8d2e42a2b4c_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:de99e5235ccf7714e7df2ef04b8c5c60c3efe04cacee13acfbaddaa60c5f88bf_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-59436"
        },
        {
          "category": "external",
          "summary": "RHBZ#2395629",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2395629"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-59436",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-59436"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-59436",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-59436"
        },
        {
          "category": "external",
          "summary": "https://cosmosofcyberspace.github.io/CVE-Application-Document.html",
          "url": "https://cosmosofcyberspace.github.io/CVE-Application-Document.html"
        },
        {
          "category": "external",
          "summary": "https://github.com/indutny/node-ip/issues/160",
          "url": "https://github.com/indutny/node-ip/issues/160"
        }
      ],
      "release_date": "2025-09-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-01T13:31:31+00:00",
          "details": "The container images provided by this update can be downloaded from the\nRed Hat container registry at registry.redhat.io using the \"podman pull\" command.",
          "product_ids": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:070f43995aae0152eac7d228ae7d4d005eb57e06e14aef1b50d4db64341b826a_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:6c084d7b7609111b8c28d22a7e69d2093607e9a648b7fb7259bcf5693ca35875_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:b36874b30b49a770f223a34034ae128a1a02fe0dfdb16cea5432ed67a24728af_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:decb2f66e30c9500882c35f898e7da4e4d2ee31a7421b9dcab736350c7a5a771_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:62115"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:044d55095e592d054a5ec69603c1fd8886ea3efcedfd95945dbef3596c9835d5_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9b426d409203a3366689db14f15b0d8639d231945678184c3b43869d56705dbd_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:a1642617a4fc8ff1b79299b160b0f644eeafeb4809981a9d00a3e621ec8bb096_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:bbb4f2499a816032af66bb8b022d8a51198a5db01ee39714800340cbd4a45d40_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:39cf934468566964e44ddac65928d837528d126d16d5ad6d71298c0570b0066d_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3d2d10adc4f85192a3729477777b068366b5178512724d3ffd6c498ba577d847_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:8aac763313e46322e3d0fbb3fbed767228906f75865d54eb753f03f027408926_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:cbd32c0b082f368583eeff3657a97a79a11ccb5d3bcf5663dd8738d09a0d53e8_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3a7dedb1b1fee0c80dcfe0f3ebce6e20aa6a364fe66808458f5416ae09890c56_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3d4665881548c0808fea1612a972c732c5f2b928ad49fbb8025ceb7f410faabb_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:765efce53826bcdd18c41186fb1fa291e9b1450c43706747d2be1dd5addda19a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:79bd982b6824100b974103347eaaa7f34c60f4b1118c93d7e628bafb11945a17_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:070f43995aae0152eac7d228ae7d4d005eb57e06e14aef1b50d4db64341b826a_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:6c084d7b7609111b8c28d22a7e69d2093607e9a648b7fb7259bcf5693ca35875_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:b36874b30b49a770f223a34034ae128a1a02fe0dfdb16cea5432ed67a24728af_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:decb2f66e30c9500882c35f898e7da4e4d2ee31a7421b9dcab736350c7a5a771_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3c1bbf300b5bd123493c57ffe84ca24bf14fcf32b648cc8c279ad3a3101c19c8_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7256c524d36f6128bffc8fdeec7e9ec435d43ceb57afd1512e496f85a09376f9_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7e7b6ea0214c616e7ef462152854207afe84732c54150914fa6180d8cc29a4ad_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:ed001e7318e45d7c0372b966a8c447eddf75d1079b1b937872c2c12893389849_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:4493b44fc1a487413d554826a92f82a44aca453e8c5d9c476ed47ef3efc1123a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:63eed84d24f949baf09d2294dcc9849e72a6cbe6213844872efb9843898a132f_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:b0ba95a2611c37db8f149d5fe44f424f3ff696535f7e5ac5cbadd45837f864cb_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:db068d24b3055fe96d2fa8703405eca07634238306159e3803ff4ae23f1024fd_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:65f82ec0df5d07b18d73620b7823bf7a51f33c3f3c4c44b290d9cd5f79c8e64a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:86d8a15cc12eaf34d01d077924301ee0276bc2b9539987b1133dc9b65609d660_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:b48486f663889cd57eead6f097d6cc26e6c2ff9bdfbb6f24b8d1f8d2e42a2b4c_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:de99e5235ccf7714e7df2ef04b8c5c60c3efe04cacee13acfbaddaa60c5f88bf_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 3.2,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:044d55095e592d054a5ec69603c1fd8886ea3efcedfd95945dbef3596c9835d5_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9b426d409203a3366689db14f15b0d8639d231945678184c3b43869d56705dbd_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:a1642617a4fc8ff1b79299b160b0f644eeafeb4809981a9d00a3e621ec8bb096_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:bbb4f2499a816032af66bb8b022d8a51198a5db01ee39714800340cbd4a45d40_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:39cf934468566964e44ddac65928d837528d126d16d5ad6d71298c0570b0066d_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3d2d10adc4f85192a3729477777b068366b5178512724d3ffd6c498ba577d847_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:8aac763313e46322e3d0fbb3fbed767228906f75865d54eb753f03f027408926_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:cbd32c0b082f368583eeff3657a97a79a11ccb5d3bcf5663dd8738d09a0d53e8_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3a7dedb1b1fee0c80dcfe0f3ebce6e20aa6a364fe66808458f5416ae09890c56_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3d4665881548c0808fea1612a972c732c5f2b928ad49fbb8025ceb7f410faabb_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:765efce53826bcdd18c41186fb1fa291e9b1450c43706747d2be1dd5addda19a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:79bd982b6824100b974103347eaaa7f34c60f4b1118c93d7e628bafb11945a17_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:070f43995aae0152eac7d228ae7d4d005eb57e06e14aef1b50d4db64341b826a_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:6c084d7b7609111b8c28d22a7e69d2093607e9a648b7fb7259bcf5693ca35875_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:b36874b30b49a770f223a34034ae128a1a02fe0dfdb16cea5432ed67a24728af_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:decb2f66e30c9500882c35f898e7da4e4d2ee31a7421b9dcab736350c7a5a771_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3c1bbf300b5bd123493c57ffe84ca24bf14fcf32b648cc8c279ad3a3101c19c8_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7256c524d36f6128bffc8fdeec7e9ec435d43ceb57afd1512e496f85a09376f9_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7e7b6ea0214c616e7ef462152854207afe84732c54150914fa6180d8cc29a4ad_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:ed001e7318e45d7c0372b966a8c447eddf75d1079b1b937872c2c12893389849_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:4493b44fc1a487413d554826a92f82a44aca453e8c5d9c476ed47ef3efc1123a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:63eed84d24f949baf09d2294dcc9849e72a6cbe6213844872efb9843898a132f_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:b0ba95a2611c37db8f149d5fe44f424f3ff696535f7e5ac5cbadd45837f864cb_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:db068d24b3055fe96d2fa8703405eca07634238306159e3803ff4ae23f1024fd_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:65f82ec0df5d07b18d73620b7823bf7a51f33c3f3c4c44b290d9cd5f79c8e64a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:86d8a15cc12eaf34d01d077924301ee0276bc2b9539987b1133dc9b65609d660_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:b48486f663889cd57eead6f097d6cc26e6c2ff9bdfbb6f24b8d1f8d2e42a2b4c_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:de99e5235ccf7714e7df2ef04b8c5c60c3efe04cacee13acfbaddaa60c5f88bf_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "ip: Node ip SSRF"
    },
    {
      "cve": "CVE-2025-66418",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2025-12-05T17:01:20.277857+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:39cf934468566964e44ddac65928d837528d126d16d5ad6d71298c0570b0066d_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3d2d10adc4f85192a3729477777b068366b5178512724d3ffd6c498ba577d847_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:8aac763313e46322e3d0fbb3fbed767228906f75865d54eb753f03f027408926_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:cbd32c0b082f368583eeff3657a97a79a11ccb5d3bcf5663dd8738d09a0d53e8_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3a7dedb1b1fee0c80dcfe0f3ebce6e20aa6a364fe66808458f5416ae09890c56_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3d4665881548c0808fea1612a972c732c5f2b928ad49fbb8025ceb7f410faabb_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:765efce53826bcdd18c41186fb1fa291e9b1450c43706747d2be1dd5addda19a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:79bd982b6824100b974103347eaaa7f34c60f4b1118c93d7e628bafb11945a17_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:070f43995aae0152eac7d228ae7d4d005eb57e06e14aef1b50d4db64341b826a_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:6c084d7b7609111b8c28d22a7e69d2093607e9a648b7fb7259bcf5693ca35875_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:b36874b30b49a770f223a34034ae128a1a02fe0dfdb16cea5432ed67a24728af_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:decb2f66e30c9500882c35f898e7da4e4d2ee31a7421b9dcab736350c7a5a771_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3c1bbf300b5bd123493c57ffe84ca24bf14fcf32b648cc8c279ad3a3101c19c8_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7256c524d36f6128bffc8fdeec7e9ec435d43ceb57afd1512e496f85a09376f9_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7e7b6ea0214c616e7ef462152854207afe84732c54150914fa6180d8cc29a4ad_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:ed001e7318e45d7c0372b966a8c447eddf75d1079b1b937872c2c12893389849_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:4493b44fc1a487413d554826a92f82a44aca453e8c5d9c476ed47ef3efc1123a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:63eed84d24f949baf09d2294dcc9849e72a6cbe6213844872efb9843898a132f_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:b0ba95a2611c37db8f149d5fe44f424f3ff696535f7e5ac5cbadd45837f864cb_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:db068d24b3055fe96d2fa8703405eca07634238306159e3803ff4ae23f1024fd_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:65f82ec0df5d07b18d73620b7823bf7a51f33c3f3c4c44b290d9cd5f79c8e64a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:86d8a15cc12eaf34d01d077924301ee0276bc2b9539987b1133dc9b65609d660_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:b48486f663889cd57eead6f097d6cc26e6c2ff9bdfbb6f24b8d1f8d2e42a2b4c_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:de99e5235ccf7714e7df2ef04b8c5c60c3efe04cacee13acfbaddaa60c5f88bf_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2419455"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in urllib3 Python library that could lead to a Denial of Service condition. A remote, malicious server can exploit this flaw by responding to a client request with an HTTP message that uses an excessive number of chained compression algorithms. This unlimited decompression chain causes the client system to consume a virtually unbounded amount of CPU resources and memory. The high resource usage leads to service disruption, making the application unresponsive.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important impact denial of service vulnerability in the urllib3 HTTP client library allows uncontrolled memory consumption when decompressing highly compressed HTTP responses. Due to the lack of an overall decompression size limit in the Streaming API, a malicious server can exhaust client memory, leading to a denial of service.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:044d55095e592d054a5ec69603c1fd8886ea3efcedfd95945dbef3596c9835d5_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9b426d409203a3366689db14f15b0d8639d231945678184c3b43869d56705dbd_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:a1642617a4fc8ff1b79299b160b0f644eeafeb4809981a9d00a3e621ec8bb096_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:bbb4f2499a816032af66bb8b022d8a51198a5db01ee39714800340cbd4a45d40_s390x"
        ],
        "known_not_affected": [
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:39cf934468566964e44ddac65928d837528d126d16d5ad6d71298c0570b0066d_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3d2d10adc4f85192a3729477777b068366b5178512724d3ffd6c498ba577d847_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:8aac763313e46322e3d0fbb3fbed767228906f75865d54eb753f03f027408926_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:cbd32c0b082f368583eeff3657a97a79a11ccb5d3bcf5663dd8738d09a0d53e8_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3a7dedb1b1fee0c80dcfe0f3ebce6e20aa6a364fe66808458f5416ae09890c56_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3d4665881548c0808fea1612a972c732c5f2b928ad49fbb8025ceb7f410faabb_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:765efce53826bcdd18c41186fb1fa291e9b1450c43706747d2be1dd5addda19a_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:79bd982b6824100b974103347eaaa7f34c60f4b1118c93d7e628bafb11945a17_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:070f43995aae0152eac7d228ae7d4d005eb57e06e14aef1b50d4db64341b826a_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:6c084d7b7609111b8c28d22a7e69d2093607e9a648b7fb7259bcf5693ca35875_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:b36874b30b49a770f223a34034ae128a1a02fe0dfdb16cea5432ed67a24728af_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:decb2f66e30c9500882c35f898e7da4e4d2ee31a7421b9dcab736350c7a5a771_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3c1bbf300b5bd123493c57ffe84ca24bf14fcf32b648cc8c279ad3a3101c19c8_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7256c524d36f6128bffc8fdeec7e9ec435d43ceb57afd1512e496f85a09376f9_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7e7b6ea0214c616e7ef462152854207afe84732c54150914fa6180d8cc29a4ad_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:ed001e7318e45d7c0372b966a8c447eddf75d1079b1b937872c2c12893389849_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:4493b44fc1a487413d554826a92f82a44aca453e8c5d9c476ed47ef3efc1123a_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:63eed84d24f949baf09d2294dcc9849e72a6cbe6213844872efb9843898a132f_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:b0ba95a2611c37db8f149d5fe44f424f3ff696535f7e5ac5cbadd45837f864cb_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:db068d24b3055fe96d2fa8703405eca07634238306159e3803ff4ae23f1024fd_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:65f82ec0df5d07b18d73620b7823bf7a51f33c3f3c4c44b290d9cd5f79c8e64a_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:86d8a15cc12eaf34d01d077924301ee0276bc2b9539987b1133dc9b65609d660_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:b48486f663889cd57eead6f097d6cc26e6c2ff9bdfbb6f24b8d1f8d2e42a2b4c_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:de99e5235ccf7714e7df2ef04b8c5c60c3efe04cacee13acfbaddaa60c5f88bf_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-66418"
        },
        {
          "category": "external",
          "summary": "RHBZ#2419455",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2419455"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-66418",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-66418"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66418",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66418"
        },
        {
          "category": "external",
          "summary": "https://github.com/urllib3/urllib3/commit/24d7b67eac89f94e11003424bcf0d8f7b72222a8",
          "url": "https://github.com/urllib3/urllib3/commit/24d7b67eac89f94e11003424bcf0d8f7b72222a8"
        },
        {
          "category": "external",
          "summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-gm62-xv2j-4w53",
          "url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-gm62-xv2j-4w53"
        }
      ],
      "release_date": "2025-12-05T16:02:15.271000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-01T13:31:31+00:00",
          "details": "The container images provided by this update can be downloaded from the\nRed Hat container registry at registry.redhat.io using the \"podman pull\" command.",
          "product_ids": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:044d55095e592d054a5ec69603c1fd8886ea3efcedfd95945dbef3596c9835d5_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9b426d409203a3366689db14f15b0d8639d231945678184c3b43869d56705dbd_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:a1642617a4fc8ff1b79299b160b0f644eeafeb4809981a9d00a3e621ec8bb096_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:bbb4f2499a816032af66bb8b022d8a51198a5db01ee39714800340cbd4a45d40_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:62115"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:044d55095e592d054a5ec69603c1fd8886ea3efcedfd95945dbef3596c9835d5_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9b426d409203a3366689db14f15b0d8639d231945678184c3b43869d56705dbd_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:a1642617a4fc8ff1b79299b160b0f644eeafeb4809981a9d00a3e621ec8bb096_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:bbb4f2499a816032af66bb8b022d8a51198a5db01ee39714800340cbd4a45d40_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:39cf934468566964e44ddac65928d837528d126d16d5ad6d71298c0570b0066d_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3d2d10adc4f85192a3729477777b068366b5178512724d3ffd6c498ba577d847_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:8aac763313e46322e3d0fbb3fbed767228906f75865d54eb753f03f027408926_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:cbd32c0b082f368583eeff3657a97a79a11ccb5d3bcf5663dd8738d09a0d53e8_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3a7dedb1b1fee0c80dcfe0f3ebce6e20aa6a364fe66808458f5416ae09890c56_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3d4665881548c0808fea1612a972c732c5f2b928ad49fbb8025ceb7f410faabb_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:765efce53826bcdd18c41186fb1fa291e9b1450c43706747d2be1dd5addda19a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:79bd982b6824100b974103347eaaa7f34c60f4b1118c93d7e628bafb11945a17_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:070f43995aae0152eac7d228ae7d4d005eb57e06e14aef1b50d4db64341b826a_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:6c084d7b7609111b8c28d22a7e69d2093607e9a648b7fb7259bcf5693ca35875_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:b36874b30b49a770f223a34034ae128a1a02fe0dfdb16cea5432ed67a24728af_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:decb2f66e30c9500882c35f898e7da4e4d2ee31a7421b9dcab736350c7a5a771_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3c1bbf300b5bd123493c57ffe84ca24bf14fcf32b648cc8c279ad3a3101c19c8_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7256c524d36f6128bffc8fdeec7e9ec435d43ceb57afd1512e496f85a09376f9_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7e7b6ea0214c616e7ef462152854207afe84732c54150914fa6180d8cc29a4ad_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:ed001e7318e45d7c0372b966a8c447eddf75d1079b1b937872c2c12893389849_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:4493b44fc1a487413d554826a92f82a44aca453e8c5d9c476ed47ef3efc1123a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:63eed84d24f949baf09d2294dcc9849e72a6cbe6213844872efb9843898a132f_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:b0ba95a2611c37db8f149d5fe44f424f3ff696535f7e5ac5cbadd45837f864cb_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:db068d24b3055fe96d2fa8703405eca07634238306159e3803ff4ae23f1024fd_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:65f82ec0df5d07b18d73620b7823bf7a51f33c3f3c4c44b290d9cd5f79c8e64a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:86d8a15cc12eaf34d01d077924301ee0276bc2b9539987b1133dc9b65609d660_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:b48486f663889cd57eead6f097d6cc26e6c2ff9bdfbb6f24b8d1f8d2e42a2b4c_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:de99e5235ccf7714e7df2ef04b8c5c60c3efe04cacee13acfbaddaa60c5f88bf_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:044d55095e592d054a5ec69603c1fd8886ea3efcedfd95945dbef3596c9835d5_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9b426d409203a3366689db14f15b0d8639d231945678184c3b43869d56705dbd_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:a1642617a4fc8ff1b79299b160b0f644eeafeb4809981a9d00a3e621ec8bb096_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:bbb4f2499a816032af66bb8b022d8a51198a5db01ee39714800340cbd4a45d40_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:39cf934468566964e44ddac65928d837528d126d16d5ad6d71298c0570b0066d_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3d2d10adc4f85192a3729477777b068366b5178512724d3ffd6c498ba577d847_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:8aac763313e46322e3d0fbb3fbed767228906f75865d54eb753f03f027408926_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:cbd32c0b082f368583eeff3657a97a79a11ccb5d3bcf5663dd8738d09a0d53e8_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3a7dedb1b1fee0c80dcfe0f3ebce6e20aa6a364fe66808458f5416ae09890c56_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3d4665881548c0808fea1612a972c732c5f2b928ad49fbb8025ceb7f410faabb_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:765efce53826bcdd18c41186fb1fa291e9b1450c43706747d2be1dd5addda19a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:79bd982b6824100b974103347eaaa7f34c60f4b1118c93d7e628bafb11945a17_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:070f43995aae0152eac7d228ae7d4d005eb57e06e14aef1b50d4db64341b826a_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:6c084d7b7609111b8c28d22a7e69d2093607e9a648b7fb7259bcf5693ca35875_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:b36874b30b49a770f223a34034ae128a1a02fe0dfdb16cea5432ed67a24728af_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:decb2f66e30c9500882c35f898e7da4e4d2ee31a7421b9dcab736350c7a5a771_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3c1bbf300b5bd123493c57ffe84ca24bf14fcf32b648cc8c279ad3a3101c19c8_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7256c524d36f6128bffc8fdeec7e9ec435d43ceb57afd1512e496f85a09376f9_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7e7b6ea0214c616e7ef462152854207afe84732c54150914fa6180d8cc29a4ad_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:ed001e7318e45d7c0372b966a8c447eddf75d1079b1b937872c2c12893389849_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:4493b44fc1a487413d554826a92f82a44aca453e8c5d9c476ed47ef3efc1123a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:63eed84d24f949baf09d2294dcc9849e72a6cbe6213844872efb9843898a132f_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:b0ba95a2611c37db8f149d5fe44f424f3ff696535f7e5ac5cbadd45837f864cb_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:db068d24b3055fe96d2fa8703405eca07634238306159e3803ff4ae23f1024fd_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:65f82ec0df5d07b18d73620b7823bf7a51f33c3f3c4c44b290d9cd5f79c8e64a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:86d8a15cc12eaf34d01d077924301ee0276bc2b9539987b1133dc9b65609d660_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:b48486f663889cd57eead6f097d6cc26e6c2ff9bdfbb6f24b8d1f8d2e42a2b4c_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:de99e5235ccf7714e7df2ef04b8c5c60c3efe04cacee13acfbaddaa60c5f88bf_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion"
    },
    {
      "cve": "CVE-2026-24049",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "discovery_date": "2026-01-22T05:00:54.709179+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:044d55095e592d054a5ec69603c1fd8886ea3efcedfd95945dbef3596c9835d5_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9b426d409203a3366689db14f15b0d8639d231945678184c3b43869d56705dbd_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:a1642617a4fc8ff1b79299b160b0f644eeafeb4809981a9d00a3e621ec8bb096_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:bbb4f2499a816032af66bb8b022d8a51198a5db01ee39714800340cbd4a45d40_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:39cf934468566964e44ddac65928d837528d126d16d5ad6d71298c0570b0066d_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3d2d10adc4f85192a3729477777b068366b5178512724d3ffd6c498ba577d847_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:8aac763313e46322e3d0fbb3fbed767228906f75865d54eb753f03f027408926_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:cbd32c0b082f368583eeff3657a97a79a11ccb5d3bcf5663dd8738d09a0d53e8_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3a7dedb1b1fee0c80dcfe0f3ebce6e20aa6a364fe66808458f5416ae09890c56_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3d4665881548c0808fea1612a972c732c5f2b928ad49fbb8025ceb7f410faabb_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:765efce53826bcdd18c41186fb1fa291e9b1450c43706747d2be1dd5addda19a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:79bd982b6824100b974103347eaaa7f34c60f4b1118c93d7e628bafb11945a17_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3c1bbf300b5bd123493c57ffe84ca24bf14fcf32b648cc8c279ad3a3101c19c8_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7256c524d36f6128bffc8fdeec7e9ec435d43ceb57afd1512e496f85a09376f9_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7e7b6ea0214c616e7ef462152854207afe84732c54150914fa6180d8cc29a4ad_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:ed001e7318e45d7c0372b966a8c447eddf75d1079b1b937872c2c12893389849_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:4493b44fc1a487413d554826a92f82a44aca453e8c5d9c476ed47ef3efc1123a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:63eed84d24f949baf09d2294dcc9849e72a6cbe6213844872efb9843898a132f_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:b0ba95a2611c37db8f149d5fe44f424f3ff696535f7e5ac5cbadd45837f864cb_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:db068d24b3055fe96d2fa8703405eca07634238306159e3803ff4ae23f1024fd_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:65f82ec0df5d07b18d73620b7823bf7a51f33c3f3c4c44b290d9cd5f79c8e64a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:86d8a15cc12eaf34d01d077924301ee0276bc2b9539987b1133dc9b65609d660_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:b48486f663889cd57eead6f097d6cc26e6c2ff9bdfbb6f24b8d1f8d2e42a2b4c_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:de99e5235ccf7714e7df2ef04b8c5c60c3efe04cacee13acfbaddaa60c5f88bf_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2431959"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A path traversal flaw has been discovered in the python wheel too. The unpack function is vulnerable to file permission modification through mishandling of file permissions after extraction. The logic blindly trusts the filename from the archive header for the chmod operation, even though the extraction process itself might have sanitized the path. Attackers can craft a malicious wheel file that, when unpacked, changes the permissions of critical system files (e.g., /etc/passwd, SSH keys, config files), allowing for Privilege Escalation or arbitrary code execution by modifying now-writable scripts.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "wheel: wheel: Privilege Escalation or Arbitrary Code Execution via malicious wheel file unpacking",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:070f43995aae0152eac7d228ae7d4d005eb57e06e14aef1b50d4db64341b826a_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:6c084d7b7609111b8c28d22a7e69d2093607e9a648b7fb7259bcf5693ca35875_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:b36874b30b49a770f223a34034ae128a1a02fe0dfdb16cea5432ed67a24728af_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:decb2f66e30c9500882c35f898e7da4e4d2ee31a7421b9dcab736350c7a5a771_s390x"
        ],
        "known_not_affected": [
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:044d55095e592d054a5ec69603c1fd8886ea3efcedfd95945dbef3596c9835d5_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9b426d409203a3366689db14f15b0d8639d231945678184c3b43869d56705dbd_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:a1642617a4fc8ff1b79299b160b0f644eeafeb4809981a9d00a3e621ec8bb096_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:bbb4f2499a816032af66bb8b022d8a51198a5db01ee39714800340cbd4a45d40_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:39cf934468566964e44ddac65928d837528d126d16d5ad6d71298c0570b0066d_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3d2d10adc4f85192a3729477777b068366b5178512724d3ffd6c498ba577d847_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:8aac763313e46322e3d0fbb3fbed767228906f75865d54eb753f03f027408926_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:cbd32c0b082f368583eeff3657a97a79a11ccb5d3bcf5663dd8738d09a0d53e8_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3a7dedb1b1fee0c80dcfe0f3ebce6e20aa6a364fe66808458f5416ae09890c56_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3d4665881548c0808fea1612a972c732c5f2b928ad49fbb8025ceb7f410faabb_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:765efce53826bcdd18c41186fb1fa291e9b1450c43706747d2be1dd5addda19a_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:79bd982b6824100b974103347eaaa7f34c60f4b1118c93d7e628bafb11945a17_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3c1bbf300b5bd123493c57ffe84ca24bf14fcf32b648cc8c279ad3a3101c19c8_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7256c524d36f6128bffc8fdeec7e9ec435d43ceb57afd1512e496f85a09376f9_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7e7b6ea0214c616e7ef462152854207afe84732c54150914fa6180d8cc29a4ad_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:ed001e7318e45d7c0372b966a8c447eddf75d1079b1b937872c2c12893389849_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:4493b44fc1a487413d554826a92f82a44aca453e8c5d9c476ed47ef3efc1123a_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:63eed84d24f949baf09d2294dcc9849e72a6cbe6213844872efb9843898a132f_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:b0ba95a2611c37db8f149d5fe44f424f3ff696535f7e5ac5cbadd45837f864cb_amd64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:db068d24b3055fe96d2fa8703405eca07634238306159e3803ff4ae23f1024fd_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:65f82ec0df5d07b18d73620b7823bf7a51f33c3f3c4c44b290d9cd5f79c8e64a_ppc64le",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:86d8a15cc12eaf34d01d077924301ee0276bc2b9539987b1133dc9b65609d660_s390x",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:b48486f663889cd57eead6f097d6cc26e6c2ff9bdfbb6f24b8d1f8d2e42a2b4c_arm64",
          "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:de99e5235ccf7714e7df2ef04b8c5c60c3efe04cacee13acfbaddaa60c5f88bf_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-24049"
        },
        {
          "category": "external",
          "summary": "RHBZ#2431959",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2431959"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-24049",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-24049"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-24049",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-24049"
        },
        {
          "category": "external",
          "summary": "https://github.com/pypa/wheel/commit/7a7d2de96b22a9adf9208afcc9547e1001569fef",
          "url": "https://github.com/pypa/wheel/commit/7a7d2de96b22a9adf9208afcc9547e1001569fef"
        },
        {
          "category": "external",
          "summary": "https://github.com/pypa/wheel/releases/tag/0.46.2",
          "url": "https://github.com/pypa/wheel/releases/tag/0.46.2"
        },
        {
          "category": "external",
          "summary": "https://github.com/pypa/wheel/security/advisories/GHSA-8rrh-rw8j-w5fx",
          "url": "https://github.com/pypa/wheel/security/advisories/GHSA-8rrh-rw8j-w5fx"
        }
      ],
      "release_date": "2026-01-22T04:02:08.706000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-01T13:31:31+00:00",
          "details": "The container images provided by this update can be downloaded from the\nRed Hat container registry at registry.redhat.io using the \"podman pull\" command.",
          "product_ids": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:070f43995aae0152eac7d228ae7d4d005eb57e06e14aef1b50d4db64341b826a_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:6c084d7b7609111b8c28d22a7e69d2093607e9a648b7fb7259bcf5693ca35875_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:b36874b30b49a770f223a34034ae128a1a02fe0dfdb16cea5432ed67a24728af_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:decb2f66e30c9500882c35f898e7da4e4d2ee31a7421b9dcab736350c7a5a771_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:62115"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:044d55095e592d054a5ec69603c1fd8886ea3efcedfd95945dbef3596c9835d5_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9b426d409203a3366689db14f15b0d8639d231945678184c3b43869d56705dbd_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:a1642617a4fc8ff1b79299b160b0f644eeafeb4809981a9d00a3e621ec8bb096_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:bbb4f2499a816032af66bb8b022d8a51198a5db01ee39714800340cbd4a45d40_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:39cf934468566964e44ddac65928d837528d126d16d5ad6d71298c0570b0066d_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3d2d10adc4f85192a3729477777b068366b5178512724d3ffd6c498ba577d847_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:8aac763313e46322e3d0fbb3fbed767228906f75865d54eb753f03f027408926_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:cbd32c0b082f368583eeff3657a97a79a11ccb5d3bcf5663dd8738d09a0d53e8_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3a7dedb1b1fee0c80dcfe0f3ebce6e20aa6a364fe66808458f5416ae09890c56_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3d4665881548c0808fea1612a972c732c5f2b928ad49fbb8025ceb7f410faabb_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:765efce53826bcdd18c41186fb1fa291e9b1450c43706747d2be1dd5addda19a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:79bd982b6824100b974103347eaaa7f34c60f4b1118c93d7e628bafb11945a17_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:070f43995aae0152eac7d228ae7d4d005eb57e06e14aef1b50d4db64341b826a_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:6c084d7b7609111b8c28d22a7e69d2093607e9a648b7fb7259bcf5693ca35875_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:b36874b30b49a770f223a34034ae128a1a02fe0dfdb16cea5432ed67a24728af_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:decb2f66e30c9500882c35f898e7da4e4d2ee31a7421b9dcab736350c7a5a771_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3c1bbf300b5bd123493c57ffe84ca24bf14fcf32b648cc8c279ad3a3101c19c8_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7256c524d36f6128bffc8fdeec7e9ec435d43ceb57afd1512e496f85a09376f9_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7e7b6ea0214c616e7ef462152854207afe84732c54150914fa6180d8cc29a4ad_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:ed001e7318e45d7c0372b966a8c447eddf75d1079b1b937872c2c12893389849_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:4493b44fc1a487413d554826a92f82a44aca453e8c5d9c476ed47ef3efc1123a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:63eed84d24f949baf09d2294dcc9849e72a6cbe6213844872efb9843898a132f_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:b0ba95a2611c37db8f149d5fe44f424f3ff696535f7e5ac5cbadd45837f864cb_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:db068d24b3055fe96d2fa8703405eca07634238306159e3803ff4ae23f1024fd_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:65f82ec0df5d07b18d73620b7823bf7a51f33c3f3c4c44b290d9cd5f79c8e64a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:86d8a15cc12eaf34d01d077924301ee0276bc2b9539987b1133dc9b65609d660_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:b48486f663889cd57eead6f097d6cc26e6c2ff9bdfbb6f24b8d1f8d2e42a2b4c_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:de99e5235ccf7714e7df2ef04b8c5c60c3efe04cacee13acfbaddaa60c5f88bf_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:044d55095e592d054a5ec69603c1fd8886ea3efcedfd95945dbef3596c9835d5_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:9b426d409203a3366689db14f15b0d8639d231945678184c3b43869d56705dbd_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:a1642617a4fc8ff1b79299b160b0f644eeafeb4809981a9d00a3e621ec8bb096_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/grafana-rhel9@sha256:bbb4f2499a816032af66bb8b022d8a51198a5db01ee39714800340cbd4a45d40_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:39cf934468566964e44ddac65928d837528d126d16d5ad6d71298c0570b0066d_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:3d2d10adc4f85192a3729477777b068366b5178512724d3ffd6c498ba577d847_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:8aac763313e46322e3d0fbb3fbed767228906f75865d54eb753f03f027408926_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/keepalived-rhel9@sha256:cbd32c0b082f368583eeff3657a97a79a11ccb5d3bcf5663dd8738d09a0d53e8_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3a7dedb1b1fee0c80dcfe0f3ebce6e20aa6a364fe66808458f5416ae09890c56_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3d4665881548c0808fea1612a972c732c5f2b928ad49fbb8025ceb7f410faabb_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:765efce53826bcdd18c41186fb1fa291e9b1450c43706747d2be1dd5addda19a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:79bd982b6824100b974103347eaaa7f34c60f4b1118c93d7e628bafb11945a17_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:070f43995aae0152eac7d228ae7d4d005eb57e06e14aef1b50d4db64341b826a_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:6c084d7b7609111b8c28d22a7e69d2093607e9a648b7fb7259bcf5693ca35875_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:b36874b30b49a770f223a34034ae128a1a02fe0dfdb16cea5432ed67a24728af_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:decb2f66e30c9500882c35f898e7da4e4d2ee31a7421b9dcab736350c7a5a771_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3c1bbf300b5bd123493c57ffe84ca24bf14fcf32b648cc8c279ad3a3101c19c8_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7256c524d36f6128bffc8fdeec7e9ec435d43ceb57afd1512e496f85a09376f9_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:7e7b6ea0214c616e7ef462152854207afe84732c54150914fa6180d8cc29a4ad_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:ed001e7318e45d7c0372b966a8c447eddf75d1079b1b937872c2c12893389849_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:4493b44fc1a487413d554826a92f82a44aca453e8c5d9c476ed47ef3efc1123a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:63eed84d24f949baf09d2294dcc9849e72a6cbe6213844872efb9843898a132f_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:b0ba95a2611c37db8f149d5fe44f424f3ff696535f7e5ac5cbadd45837f864cb_amd64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:db068d24b3055fe96d2fa8703405eca07634238306159e3803ff4ae23f1024fd_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:65f82ec0df5d07b18d73620b7823bf7a51f33c3f3c4c44b290d9cd5f79c8e64a_ppc64le",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:86d8a15cc12eaf34d01d077924301ee0276bc2b9539987b1133dc9b65609d660_s390x",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:b48486f663889cd57eead6f097d6cc26e6c2ff9bdfbb6f24b8d1f8d2e42a2b4c_arm64",
            "Red Hat Ceph Storage 8.1:registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:de99e5235ccf7714e7df2ef04b8c5c60c3efe04cacee13acfbaddaa60c5f88bf_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "wheel: wheel: Privilege Escalation or Arbitrary Code Execution via malicious wheel file unpacking"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.