RHSA-2026:70593

Vulnerability from csaf_redhat - Published: 2026-09-23 06:31 - Updated: 2026-09-25 14:33
Summary
Red Hat Security Advisory: Network Observability 1.12.3 for OpenShift
Severity
Important
Notes
Topic: Network Observability 1.12 for Red Hat OpenShift.
Details: Network flows collector and monitoring solution.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
CVE-2026-33818

A flaw was found in the `encoding/asn1` package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One (ASN.1) structure, leading to excessive recursion during the `Unmarshal` operation. This could result in stack exhaustion and a Denial of Service (DoS) condition.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-776 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
Affected products
Product Identifier Version Remediation
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:2fda4c6642fd343cf7bd0fe629e4d85ae95c5180b8f544c464980a7c7dde9e58_s390x —
Vendor Fix fix
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:97a0788b5ac604ca74362198517f87499da2ec26dd449cf5fb7d6eddf28de9f6_amd64 —
Vendor Fix fix
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:ada851d78ec38f12688e6a64166767ddd1c960f6099604e0abf06d18ad74519a_ppc64le —
Vendor Fix fix
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b307464aa7f189abb67b951542d74b1f89940412fd4d08ab89a9aac25de4fb38_arm64 —
Vendor Fix fix
Product Identifier Version Remediation
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:474cf8c7500c50dfd569180570f00d9649691a8621ce34f82957e53d2ad95a66_s390x —
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:667964ca0a8379a75425a90e7f1a3c109804e91b6fbc38aa9ecc72d57949925b_ppc64le —
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:9d1fac43e376171a8666d299e4d06f50e102695266e5a8bf424886dcb7e305eb_amd64 —
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:ae786598501725df58ae66ce52607fb8f0c325456537cf41e55cae33ccd4e370_arm64 —
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:0d78ff17f71f5f742aae872a9a15c48a5bf0baa328b85d627ae177bf2c88e3da_arm64 —
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:1a51f636af388a11694876bcea3acb73885479b1b7e02417b4c13c8fde93ab2a_ppc64le —
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:7aa9a1a8a24b2861178d0f64ae4593cc1668562f9844f405e05cf47e94229a09_s390x —
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:e9e0770bdb543dd42aa3c3aa5014cbf19d913da8f58e4d69eb58132421137ac6_amd64 —
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:5540377f87365b5501ec4bac45334b0fc1658635c3347505fa52fe11e6f9098f_ppc64le —
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b2c2987a6048c3e65be46209059f78067a7d0ebdf8d4481c607a8f322696e903_arm64 —
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:e3ab5b8e9d1b5306ee3e8bb46d54b5b7579653117db71f6f80bf4a7f0abbc62f_s390x —
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:fb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a_amd64 —
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:068743012df5f7f0ce25e785630555ce532d50ec32a17a66e51108a5096ae38a_ppc64le —
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:0f2106026942ca06110301ece4f911b7ea0c50461cde3a5c8710e529c7f7c4c6_arm64 —
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dae49f4e857b84f9bad0c3a477c43834cbea6118a719c793b00524ab19b7dc0a_s390x —
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:eb5f0c7e8418bde2c4a059b8f7600f478cfbd3ff46f8f8fc407b50e8dc88691b_amd64 —
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:0550d8ac592cf476506a992d0d3f7beb4e6aa4414f259cda47a80e4749311537_arm64 —
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b19bfad20ee4fb3de2075251b3eb2c1ea6a76b68edac2c3bbd4523c0aa0346a8_amd64 —
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:e8e427cc5103d412b4677c3aa93912cb82a5b5db8be8d21992f4341bf404f75b_s390x —
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ebe846db7b0733c85850182d709103faf3725b27b2daa3b9d08b23212dbd5cca_ppc64le —
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:f838339b4bd024f76fead96f23892c7800ffdfb243538369bed23c4f64eef8e3_amd64 —
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:065492e0defff65abc0c2fb776b19506e65ff65924e39eaa4e2488e884376dea_arm64 —
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:0d0a2e283bcfc021884410130d3dba6b7b4edfc28223cf7a2e203c2b6b3e6a9b_amd64 —
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:42309d715ad9d81fd87b5e20d0ae8f41c4ec1f05f71e3b55b610ac6533d75253_ppc64le —
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4e81294ae472aa938a644e4672b264f5a71e3935e83322c238c960cf8d440005_s390x —
Threats
Impact Important
CVE-2026-56852

A flaw was found in golang.org/x/text. The norm.Iter component can enter an infinite loop when processing input that contains invalid UTF-8 (Unicode Transformation Format - 8-bit) bytes. A remote attacker could exploit this vulnerability by providing specially crafted input, leading to a Denial of Service (DoS) condition where the affected application becomes unresponsive.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')
Affected products
Fixed 4 products, the same list as for CVE-2026-33818
Known not affected 25 products, the same list as for CVE-2026-33818
Threats
Impact Important
CVE-2026-56853

A flaw was found in the `net/http` component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the `ReadHeaderTimeout` is not correctly applied during this process. This oversight could allow a remote attacker to maintain open connections indefinitely, potentially leading to a Denial of Service (DoS) by exhausting server resources.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 4 products, the same list as for CVE-2026-33818
Known not affected 25 products, the same list as for CVE-2026-33818
Threats
Impact Important
CVE-2026-56859

A flaw was found in the `encoding/xml` package of Go. The `DecodeElement` function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service (DoS) for the affected application.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-776 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
Affected products
Fixed 4 products, the same list as for CVE-2026-33818
Known not affected 25 products, the same list as for CVE-2026-33818
Threats
Impact Important
CVE-2026-56860

A flaw was found in `net/url`, a component of `golang`. This vulnerability arises when resolving relative paths that contain numerous parent directory ('..') segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory allocation. This can result in a Denial of Service (DoS) due to resource exhaustion.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 4 products, the same list as for CVE-2026-33818
Known not affected 25 products, the same list as for CVE-2026-33818
Threats
Impact Important
CVE-2026-56862

A flaw was found in the `crypto/tls` package, part of `golang`. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service (DoS) condition.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-1050 - Excessive Platform Resource Consumption within a Loop
Affected products
Fixed 4 products, the same list as for CVE-2026-33818
Known not affected 25 products, the same list as for CVE-2026-33818
Threats
Impact Important
CVE-2026-65819

A flaw was found in gopacket, a Go library for packet processing. Multiple layer decoders in gopacket use attacker-controlled lengths, counts, or offsets without proper validation against packet buffers. A remote, unauthenticated attacker can exploit this by sending a specially crafted packet, which, when decoded, triggers an unrecovered panic. This can lead to a remote Denial of Service (DoS) condition, making the affected system unavailable.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-805 - Buffer Access with Incorrect Length Value
Affected products
Fixed 4 products, the same list as for CVE-2026-33818
Known not affected 25 products, the same list as for CVE-2026-33818
Threats
Impact Important
CVE-2026-67213

A flaw was found in nanoid (Nano ID), a small, secure, and URL-friendly unique string ID generator. An attacker could exploit this vulnerability by providing a zero-size input to the customAlphabet or customRandom functions. This would cause an infinite loop, leading to a denial of service (DoS) condition by hanging the application's calling thread.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')
Affected products
Product Identifier Version Remediation
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:0d78ff17f71f5f742aae872a9a15c48a5bf0baa328b85d627ae177bf2c88e3da_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:1a51f636af388a11694876bcea3acb73885479b1b7e02417b4c13c8fde93ab2a_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:7aa9a1a8a24b2861178d0f64ae4593cc1668562f9844f405e05cf47e94229a09_s390x —
Vendor Fix fix
Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:e9e0770bdb543dd42aa3c3aa5014cbf19d913da8f58e4d69eb58132421137ac6_amd64 —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:2fda4c6642fd343cf7bd0fe629e4d85ae95c5180b8f544c464980a7c7dde9e58_s390x —
Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:97a0788b5ac604ca74362198517f87499da2ec26dd449cf5fb7d6eddf28de9f6_amd64 —
Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:ada851d78ec38f12688e6a64166767ddd1c960f6099604e0abf06d18ad74519a_ppc64le —
Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b307464aa7f189abb67b951542d74b1f89940412fd4d08ab89a9aac25de4fb38_arm64 —
Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:474cf8c7500c50dfd569180570f00d9649691a8621ce34f82957e53d2ad95a66_s390x —
Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:667964ca0a8379a75425a90e7f1a3c109804e91b6fbc38aa9ecc72d57949925b_ppc64le —
Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:9d1fac43e376171a8666d299e4d06f50e102695266e5a8bf424886dcb7e305eb_amd64 —
Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:ae786598501725df58ae66ce52607fb8f0c325456537cf41e55cae33ccd4e370_arm64 —
Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:5540377f87365b5501ec4bac45334b0fc1658635c3347505fa52fe11e6f9098f_ppc64le —
Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b2c2987a6048c3e65be46209059f78067a7d0ebdf8d4481c607a8f322696e903_arm64 —
Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:e3ab5b8e9d1b5306ee3e8bb46d54b5b7579653117db71f6f80bf4a7f0abbc62f_s390x —
Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:fb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a_amd64 —
Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:068743012df5f7f0ce25e785630555ce532d50ec32a17a66e51108a5096ae38a_ppc64le —
Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:0f2106026942ca06110301ece4f911b7ea0c50461cde3a5c8710e529c7f7c4c6_arm64 —
Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dae49f4e857b84f9bad0c3a477c43834cbea6118a719c793b00524ab19b7dc0a_s390x —
Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:eb5f0c7e8418bde2c4a059b8f7600f478cfbd3ff46f8f8fc407b50e8dc88691b_amd64 —
Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:0550d8ac592cf476506a992d0d3f7beb4e6aa4414f259cda47a80e4749311537_arm64 —
Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b19bfad20ee4fb3de2075251b3eb2c1ea6a76b68edac2c3bbd4523c0aa0346a8_amd64 —
Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:e8e427cc5103d412b4677c3aa93912cb82a5b5db8be8d21992f4341bf404f75b_s390x —
Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ebe846db7b0733c85850182d709103faf3725b27b2daa3b9d08b23212dbd5cca_ppc64le —
Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:f838339b4bd024f76fead96f23892c7800ffdfb243538369bed23c4f64eef8e3_amd64 —
Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:065492e0defff65abc0c2fb776b19506e65ff65924e39eaa4e2488e884376dea_arm64 —
Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:0d0a2e283bcfc021884410130d3dba6b7b4edfc28223cf7a2e203c2b6b3e6a9b_amd64 —
Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:42309d715ad9d81fd87b5e20d0ae8f41c4ec1f05f71e3b55b610ac6533d75253_ppc64le —
Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4e81294ae472aa938a644e4672b264f5a71e3935e83322c238c960cf8d440005_s390x —
Workaround
Threats
Impact Important
CVE-2026-75899

A flaw was found in fast-uri, a URI parser for Node.js. The component incorrectly decodes percent escapes in a hostname twice during URI parsing and authority recomposition. This double decoding can allow a remote attacker to manipulate a URI to point to a different network destination, such as a loopback address. This vulnerability can lead to Server-Side Request Forgery (SSRF) and bypass host-based security policies.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CWE-140 - Improper Neutralization of Delimiters
Affected products
Product Identifier Version Remediation
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:0d78ff17f71f5f742aae872a9a15c48a5bf0baa328b85d627ae177bf2c88e3da_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:1a51f636af388a11694876bcea3acb73885479b1b7e02417b4c13c8fde93ab2a_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:7aa9a1a8a24b2861178d0f64ae4593cc1668562f9844f405e05cf47e94229a09_s390x —
Vendor Fix fix
Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:e9e0770bdb543dd42aa3c3aa5014cbf19d913da8f58e4d69eb58132421137ac6_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:5540377f87365b5501ec4bac45334b0fc1658635c3347505fa52fe11e6f9098f_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b2c2987a6048c3e65be46209059f78067a7d0ebdf8d4481c607a8f322696e903_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:e3ab5b8e9d1b5306ee3e8bb46d54b5b7579653117db71f6f80bf4a7f0abbc62f_s390x —
Vendor Fix fix
Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:fb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a_amd64 —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:2fda4c6642fd343cf7bd0fe629e4d85ae95c5180b8f544c464980a7c7dde9e58_s390x —
Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:97a0788b5ac604ca74362198517f87499da2ec26dd449cf5fb7d6eddf28de9f6_amd64 —
Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:ada851d78ec38f12688e6a64166767ddd1c960f6099604e0abf06d18ad74519a_ppc64le —
Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b307464aa7f189abb67b951542d74b1f89940412fd4d08ab89a9aac25de4fb38_arm64 —
Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:474cf8c7500c50dfd569180570f00d9649691a8621ce34f82957e53d2ad95a66_s390x —
Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:667964ca0a8379a75425a90e7f1a3c109804e91b6fbc38aa9ecc72d57949925b_ppc64le —
Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:9d1fac43e376171a8666d299e4d06f50e102695266e5a8bf424886dcb7e305eb_amd64 —
Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:ae786598501725df58ae66ce52607fb8f0c325456537cf41e55cae33ccd4e370_arm64 —
Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:068743012df5f7f0ce25e785630555ce532d50ec32a17a66e51108a5096ae38a_ppc64le —
Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:0f2106026942ca06110301ece4f911b7ea0c50461cde3a5c8710e529c7f7c4c6_arm64 —
Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dae49f4e857b84f9bad0c3a477c43834cbea6118a719c793b00524ab19b7dc0a_s390x —
Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:eb5f0c7e8418bde2c4a059b8f7600f478cfbd3ff46f8f8fc407b50e8dc88691b_amd64 —
Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:0550d8ac592cf476506a992d0d3f7beb4e6aa4414f259cda47a80e4749311537_arm64 —
Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b19bfad20ee4fb3de2075251b3eb2c1ea6a76b68edac2c3bbd4523c0aa0346a8_amd64 —
Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:e8e427cc5103d412b4677c3aa93912cb82a5b5db8be8d21992f4341bf404f75b_s390x —
Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ebe846db7b0733c85850182d709103faf3725b27b2daa3b9d08b23212dbd5cca_ppc64le —
Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:f838339b4bd024f76fead96f23892c7800ffdfb243538369bed23c4f64eef8e3_amd64 —
Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:065492e0defff65abc0c2fb776b19506e65ff65924e39eaa4e2488e884376dea_arm64 —
Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:0d0a2e283bcfc021884410130d3dba6b7b4edfc28223cf7a2e203c2b6b3e6a9b_amd64 —
Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:42309d715ad9d81fd87b5e20d0ae8f41c4ec1f05f71e3b55b610ac6533d75253_ppc64le —
Workaround
Unresolved product id: Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4e81294ae472aa938a644e4672b264f5a71e3935e83322c238c960cf8d440005_s390x —
Workaround
Threats
Impact Important
CVE-2026-75931

A flaw was found in fast-uri, a URI parser for Node.js. This vulnerability arises because the parser fails to consistently convert internationalized domain names (IDN) to their standard ASCII form when processing scheme-relative references. This inconsistency can lead to host confusion, where an application might validate a URI against a security policy using one hostname, but then resolve to a different, potentially malicious, hostname. This discrepancy could allow an attacker to bypass security policies and access unauthorized resources.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CWE-444 - Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
Affected products
Fixed 8 products, the same list as for CVE-2026-75899
Known not affected 21 products, the same list as for CVE-2026-75899
Threats
Impact Important
CVE-2026-75975

A flaw was found in fast-uri, a URI parser for Node.js. Its custom parser for bracketed IPv6 literals does not fully validate the IPv6 grammar, allowing invalid trailing text in an authority to be silently discarded. This can lead to a malformed, attacker-controlled host being normalized into a different, valid IPv6 destination, such as a local or private IPv6 target. An application normalizing untrusted URLs before outbound requests, redirects, or proxy routing could be redirected, resulting in a server-side request forgery (SSRF) and address-policy bypass.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CWE-918 - Server-Side Request Forgery (SSRF)
Affected products
Fixed 8 products, the same list as for CVE-2026-75899
Known not affected 21 products, the same list as for CVE-2026-75899
Threats
Impact Important
CVE-2026-76172

A flaw was found in fast-uri, a software component used for parsing Uniform Resource Identifiers (URIs) in Node.js applications. This vulnerability arises from an issue in how fast-uri processes the scheme part of a URI, specifically when it contains special characters that are percent-encoded. An attacker can exploit this by crafting a malicious URI, causing the parser to misinterpret the host, which can lead to serious security risks. These risks include unauthorized redirection to external websites, server-side request forgery (SSRF) where the application makes unintended requests to internal or external resources, and bypassing security policies.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CWE-76 - Improper Neutralization of Equivalent Special Elements
Affected products
Fixed 8 products, the same list as for CVE-2026-75899
Known not affected 21 products, the same list as for CVE-2026-75899
Threats
Impact Important
CVE-2026-84292

A flaw was found in fast-uri. This component improperly serializes the port component of a Uniform Resource Identifier (URI) without validating its content. A remote attacker can exploit this by crafting a malicious port value that injects authority delimiters. This manipulation can demote the intended host to user information and redirect the authority to an attacker-controlled host, leading to information disclosure as applications interpret the attacker's host as legitimate.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CWE-140 - Improper Neutralization of Delimiters
Affected products
Fixed 8 products, the same list as for CVE-2026-75899
Known not affected 21 products, the same list as for CVE-2026-75899
Threats
Impact Important
CVE-2026-84375

A flaw was found in js-yaml, a JavaScript YAML parser. An attacker can exploit this by providing a specially crafted YAML document that causes the parser to perform excessive processing when handling merge keys with empty sources. This can lead to prolonged CPU consumption, effectively causing a denial of service (DoS) for applications that process untrusted YAML input.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')
Affected products
Fixed 8 products, the same list as for CVE-2026-75899
Known not affected 21 products, the same list as for CVE-2026-75899
Threats
Impact Moderate
CVE-2026-84394

A flaw was found in fast-uri. The library incorrectly processes Uniform Resource Identifier (URI) hosts containing unbalanced brackets, leading to a discrepancy in how the host is parsed by fast-uri compared to other HTTP clients. This host confusion can allow an attacker to bypass security policies, such as Server-Side Request Forgery (SSRF) denylists or redirect allowlists, by causing an application to evaluate its policy against an incorrect host string. This could result in unintended network requests or access to unauthorized resources.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CWE-1289 - Improper Validation of Unsafe Equivalence in Input
Affected products
Fixed 8 products, the same list as for CVE-2026-75899
Known not affected 21 products, the same list as for CVE-2026-75899
Threats
Impact Important
CVE-2026-84445

A flaw was found in gRPC-Go. Servers created with xds.NewGRPCServer() can be exploited by a remote client sending a malformed RPC request that lacks the required :authority or Host headers. This can trigger an index-out-of-bounds panic, leading to the termination of the entire server process and a Denial of Service (DoS). In some deployments, this attack can be unauthenticated.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-125 - Out-of-bounds Read
Affected products
Fixed 4 products, the same list as for CVE-2026-33818
Known not affected 25 products, the same list as for CVE-2026-33818
Threats
Impact Important
References
URL Category
https://access.redhat.com/errata/RHSA-2026:70593 self
https://access.redhat.com/security/cve/CVE-2026-33818 external
https://access.redhat.com/security/cve/CVE-2026-56852 external
https://access.redhat.com/security/cve/CVE-2026-56853 external
https://access.redhat.com/security/cve/CVE-2026-56859 external
https://access.redhat.com/security/cve/CVE-2026-56860 external
https://access.redhat.com/security/cve/CVE-2026-56862 external
https://access.redhat.com/security/cve/CVE-2026-65819 external
https://access.redhat.com/security/cve/CVE-2026-67213 external
https://access.redhat.com/security/cve/CVE-2026-75899 external
https://access.redhat.com/security/cve/CVE-2026-75931 external
https://access.redhat.com/security/cve/CVE-2026-75975 external
https://access.redhat.com/security/cve/CVE-2026-76172 external
https://access.redhat.com/security/cve/CVE-2026-84292 external
https://access.redhat.com/security/cve/CVE-2026-84375 external
https://access.redhat.com/security/cve/CVE-2026-84394 external
https://access.redhat.com/security/cve/CVE-2026-84445 external
https://access.redhat.com/security/updates/classi… external
https://docs.openshift.com/container-platform/lat… external
https://security.access.redhat.com/data/csaf/v2/a… self
https://access.redhat.com/security/cve/CVE-2026-33818 self
https://bugzilla.redhat.com/show_bug.cgi?id=2515815 external
https://www.cve.org/CVERecord?id=CVE-2026-33818 external
https://nvd.nist.gov/vuln/detail/CVE-2026-33818 external
https://go.dev/cl/814980 external
https://go.dev/issue/80405 external
https://groups.google.com/g/golang-announce/c/94p… external
https://pkg.go.dev/vuln/GO-2026-5972 external
https://access.redhat.com/security/cve/CVE-2026-56852 self
https://bugzilla.redhat.com/show_bug.cgi?id=2504233 external
https://www.cve.org/CVERecord?id=CVE-2026-56852 external
https://nvd.nist.gov/vuln/detail/CVE-2026-56852 external
https://go.dev/cl/794100 external
https://go.dev/issue/80142 external
https://pkg.go.dev/vuln/GO-2026-5970 external
https://access.redhat.com/security/cve/CVE-2026-56853 self
https://bugzilla.redhat.com/show_bug.cgi?id=2515827 external
https://www.cve.org/CVERecord?id=CVE-2026-56853 external
https://nvd.nist.gov/vuln/detail/CVE-2026-56853 external
https://go.dev/cl/795540 external
https://go.dev/issue/80205 external
https://pkg.go.dev/vuln/GO-2026-6089 external
https://access.redhat.com/security/cve/CVE-2026-56859 self
https://bugzilla.redhat.com/show_bug.cgi?id=2515840 external
https://www.cve.org/CVERecord?id=CVE-2026-56859 external
https://nvd.nist.gov/vuln/detail/CVE-2026-56859 external
https://go.dev/cl/803320 external
https://go.dev/issue/80481 external
https://pkg.go.dev/vuln/GO-2026-6088 external
https://access.redhat.com/security/cve/CVE-2026-56860 self
https://bugzilla.redhat.com/show_bug.cgi?id=2515820 external
https://www.cve.org/CVERecord?id=CVE-2026-56860 external
https://nvd.nist.gov/vuln/detail/CVE-2026-56860 external
https://go.dev/cl/803681 external
https://go.dev/issue/80494 external
https://pkg.go.dev/vuln/GO-2026-6218 external
https://access.redhat.com/security/cve/CVE-2026-56862 self
https://bugzilla.redhat.com/show_bug.cgi?id=2515839 external
https://www.cve.org/CVERecord?id=CVE-2026-56862 external
https://nvd.nist.gov/vuln/detail/CVE-2026-56862 external
https://go.dev/cl/804261 external
https://go.dev/issue/80528 external
https://pkg.go.dev/vuln/GO-2026-6090 external
https://access.redhat.com/security/cve/CVE-2026-65819 self
https://bugzilla.redhat.com/show_bug.cgi?id=2512626 external
https://www.cve.org/CVERecord?id=CVE-2026-65819 external
https://nvd.nist.gov/vuln/detail/CVE-2026-65819 external
https://github.com/gopacket/gopacket/commit/210f2… external
https://github.com/gopacket/gopacket/releases/tag… external
https://github.com/gopacket/gopacket/security/adv… external
https://access.redhat.com/security/cve/CVE-2026-67213 self
https://bugzilla.redhat.com/show_bug.cgi?id=2508406 external
https://www.cve.org/CVERecord?id=CVE-2026-67213 external
https://nvd.nist.gov/vuln/detail/CVE-2026-67213 external
https://github.com/ai/nanoid/commit/cb3626d0f3342… external
https://github.com/ai/nanoid/releases/tag/5.1.6 external
https://www.vulncheck.com/advisories/nanoid-befor… external
https://access.redhat.com/security/cve/CVE-2026-75899 self
https://bugzilla.redhat.com/show_bug.cgi?id=2521778 external
https://www.cve.org/CVERecord?id=CVE-2026-75899 external
https://nvd.nist.gov/vuln/detail/CVE-2026-75899 external
https://cna.openjsf.org/security-advisories.html external
https://github.com/fastify/fast-uri/security/advi… external
https://access.redhat.com/security/cve/CVE-2026-75931 self
https://bugzilla.redhat.com/show_bug.cgi?id=2521777 external
https://www.cve.org/CVERecord?id=CVE-2026-75931 external
https://nvd.nist.gov/vuln/detail/CVE-2026-75931 external
https://github.com/fastify/fast-uri/security/advi… external
https://access.redhat.com/security/cve/CVE-2026-75975 self
https://bugzilla.redhat.com/show_bug.cgi?id=2521779 external
https://www.cve.org/CVERecord?id=CVE-2026-75975 external
https://nvd.nist.gov/vuln/detail/CVE-2026-75975 external
https://github.com/fastify/fast-uri/security/advi… external
https://access.redhat.com/security/cve/CVE-2026-76172 self
https://bugzilla.redhat.com/show_bug.cgi?id=2521798 external
https://www.cve.org/CVERecord?id=CVE-2026-76172 external
https://nvd.nist.gov/vuln/detail/CVE-2026-76172 external
https://github.com/fastify/fast-uri/security/advi… external
https://access.redhat.com/security/cve/CVE-2026-84292 self
https://bugzilla.redhat.com/show_bug.cgi?id=2527747 external
https://www.cve.org/CVERecord?id=CVE-2026-84292 external
https://nvd.nist.gov/vuln/detail/CVE-2026-84292 external
https://github.com/fastify/fast-uri/security/advi… external
https://access.redhat.com/security/cve/CVE-2026-84375 self
https://bugzilla.redhat.com/show_bug.cgi?id=2527118 external
https://www.cve.org/CVERecord?id=CVE-2026-84375 external
https://nvd.nist.gov/vuln/detail/CVE-2026-84375 external
https://github.com/nodeca/js-yaml/commit/3485bc06… external
https://github.com/nodeca/js-yaml/commit/6a8e05f9… external
https://github.com/nodeca/js-yaml/commit/d90b6612… external
https://github.com/nodeca/js-yaml/pull/797 external
https://github.com/nodeca/js-yaml/releases/tag/3.15.2 external
https://github.com/nodeca/js-yaml/releases/tag/4.3.2 external
https://github.com/nodeca/js-yaml/security/adviso… external
https://access.redhat.com/security/cve/CVE-2026-84394 self
https://bugzilla.redhat.com/show_bug.cgi?id=2527756 external
https://www.cve.org/CVERecord?id=CVE-2026-84394 external
https://nvd.nist.gov/vuln/detail/CVE-2026-84394 external
https://github.com/fastify/fast-uri/security/advi… external
https://access.redhat.com/security/cve/CVE-2026-84445 self
https://bugzilla.redhat.com/show_bug.cgi?id=2533175 external
https://www.cve.org/CVERecord?id=CVE-2026-84445 external
https://nvd.nist.gov/vuln/detail/CVE-2026-84445 external
https://github.com/grpc/grpc-go/commit/3822494d8e… external
https://github.com/grpc/grpc-go/commit/8668b69c16… external
https://github.com/grpc/grpc-go/commit/93e31b4854… external
https://github.com/grpc/grpc-go/issues/9354 external
https://github.com/grpc/grpc-go/pull/9365 external
https://github.com/grpc/grpc-go/pull/9366 external
https://github.com/grpc/grpc-go/pull/9367 external
https://github.com/grpc/grpc-go/releases/tag/v1.82.2 external
https://github.com/grpc/grpc-go/releases/tag/v1.83.2 external
https://github.com/grpc/grpc-go/security/advisori… external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Network Observability 1.12 for Red Hat OpenShift.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Network flows collector and monitoring solution.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:70593",
        "url": "https://access.redhat.com/errata/RHSA-2026:70593"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-33818",
        "url": "https://access.redhat.com/security/cve/CVE-2026-33818"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56852",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56852"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56853",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56853"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56859",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56859"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56860",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56860"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56862",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56862"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-65819",
        "url": "https://access.redhat.com/security/cve/CVE-2026-65819"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-67213",
        "url": "https://access.redhat.com/security/cve/CVE-2026-67213"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-75899",
        "url": "https://access.redhat.com/security/cve/CVE-2026-75899"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-75931",
        "url": "https://access.redhat.com/security/cve/CVE-2026-75931"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-75975",
        "url": "https://access.redhat.com/security/cve/CVE-2026-75975"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-76172",
        "url": "https://access.redhat.com/security/cve/CVE-2026-76172"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-84292",
        "url": "https://access.redhat.com/security/cve/CVE-2026-84292"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-84375",
        "url": "https://access.redhat.com/security/cve/CVE-2026-84375"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-84394",
        "url": "https://access.redhat.com/security/cve/CVE-2026-84394"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-84445",
        "url": "https://access.redhat.com/security/cve/CVE-2026-84445"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://docs.openshift.com/container-platform/latest/observability/network_observability/network-observability-operator-release-notes.html",
        "url": "https://docs.openshift.com/container-platform/latest/observability/network_observability/network-observability-operator-release-notes.html"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_70593.json"
      }
    ],
    "title": "Red Hat Security Advisory: Network Observability 1.12.3 for OpenShift",
    "tracking": {
      "current_release_date": "2026-09-25T14:33:23+00:00",
      "generator": {
        "date": "2026-09-25T14:33:23+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.0"
        }
      },
      "id": "RHSA-2026:70593",
      "initial_release_date": "2026-09-23T06:31:49+00:00",
      "revision_history": [
        {
          "date": "2026-09-23T06:31:49+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-09-23T06:31:52+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-09-25T14:33:23+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Network Observability (NETOBSERV) 1.12.3",
                "product": {
                  "name": "Network Observability (NETOBSERV) 1.12.3",
                  "product_id": "Network Observability (NETOBSERV) 1.12.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:network_observ_optr:1.12::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Network Observability (NETOBSERV)"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b19bfad20ee4fb3de2075251b3eb2c1ea6a76b68edac2c3bbd4523c0aa0346a8_amd64",
                "product": {
                  "name": "registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b19bfad20ee4fb3de2075251b3eb2c1ea6a76b68edac2c3bbd4523c0aa0346a8_amd64",
                  "product_id": "registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b19bfad20ee4fb3de2075251b3eb2c1ea6a76b68edac2c3bbd4523c0aa0346a8_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/network-observability-flowlogs-pipeline-rhel9@sha256%3Ab19bfad20ee4fb3de2075251b3eb2c1ea6a76b68edac2c3bbd4523c0aa0346a8?arch=amd64\u0026repository_url=registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9\u0026tag=1789978651"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:eb5f0c7e8418bde2c4a059b8f7600f478cfbd3ff46f8f8fc407b50e8dc88691b_amd64",
                "product": {
                  "name": "registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:eb5f0c7e8418bde2c4a059b8f7600f478cfbd3ff46f8f8fc407b50e8dc88691b_amd64",
                  "product_id": "registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:eb5f0c7e8418bde2c4a059b8f7600f478cfbd3ff46f8f8fc407b50e8dc88691b_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/network-observability-ebpf-agent-rhel9@sha256%3Aeb5f0c7e8418bde2c4a059b8f7600f478cfbd3ff46f8f8fc407b50e8dc88691b?arch=amd64\u0026repository_url=registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9\u0026tag=1789978991"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:97a0788b5ac604ca74362198517f87499da2ec26dd449cf5fb7d6eddf28de9f6_amd64",
                "product": {
                  "name": "registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:97a0788b5ac604ca74362198517f87499da2ec26dd449cf5fb7d6eddf28de9f6_amd64",
                  "product_id": "registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:97a0788b5ac604ca74362198517f87499da2ec26dd449cf5fb7d6eddf28de9f6_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/network-observability-cli-rhel9@sha256%3A97a0788b5ac604ca74362198517f87499da2ec26dd449cf5fb7d6eddf28de9f6?arch=amd64\u0026repository_url=registry.redhat.io/network-observability/network-observability-cli-rhel9\u0026tag=1789986279"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:9d1fac43e376171a8666d299e4d06f50e102695266e5a8bf424886dcb7e305eb_amd64",
                "product": {
                  "name": "registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:9d1fac43e376171a8666d299e4d06f50e102695266e5a8bf424886dcb7e305eb_amd64",
                  "product_id": "registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:9d1fac43e376171a8666d299e4d06f50e102695266e5a8bf424886dcb7e305eb_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/network-observability-console-plugin-pf4-rhel9@sha256%3A9d1fac43e376171a8666d299e4d06f50e102695266e5a8bf424886dcb7e305eb?arch=amd64\u0026repository_url=registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9\u0026tag=1789978275"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:e9e0770bdb543dd42aa3c3aa5014cbf19d913da8f58e4d69eb58132421137ac6_amd64",
                "product": {
                  "name": "registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:e9e0770bdb543dd42aa3c3aa5014cbf19d913da8f58e4d69eb58132421137ac6_amd64",
                  "product_id": "registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:e9e0770bdb543dd42aa3c3aa5014cbf19d913da8f58e4d69eb58132421137ac6_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/network-observability-console-plugin-pf5-rhel9@sha256%3Ae9e0770bdb543dd42aa3c3aa5014cbf19d913da8f58e4d69eb58132421137ac6?arch=amd64\u0026repository_url=registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9\u0026tag=1789978780"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:fb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a_amd64",
                "product": {
                  "name": "registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:fb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a_amd64",
                  "product_id": "registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:fb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/network-observability-console-plugin-rhel9@sha256%3Afb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a?arch=amd64\u0026repository_url=registry.redhat.io/network-observability/network-observability-console-plugin-rhel9\u0026tag=1789978277"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:f838339b4bd024f76fead96f23892c7800ffdfb243538369bed23c4f64eef8e3_amd64",
                "product": {
                  "name": "registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:f838339b4bd024f76fead96f23892c7800ffdfb243538369bed23c4f64eef8e3_amd64",
                  "product_id": "registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:f838339b4bd024f76fead96f23892c7800ffdfb243538369bed23c4f64eef8e3_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/network-observability-operator-bundle@sha256%3Af838339b4bd024f76fead96f23892c7800ffdfb243538369bed23c4f64eef8e3?arch=amd64\u0026repository_url=registry.redhat.io/network-observability/network-observability-operator-bundle\u0026tag=1789980334"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:0d0a2e283bcfc021884410130d3dba6b7b4edfc28223cf7a2e203c2b6b3e6a9b_amd64",
                "product": {
                  "name": "registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:0d0a2e283bcfc021884410130d3dba6b7b4edfc28223cf7a2e203c2b6b3e6a9b_amd64",
                  "product_id": "registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:0d0a2e283bcfc021884410130d3dba6b7b4edfc28223cf7a2e203c2b6b3e6a9b_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/network-observability-rhel9-operator@sha256%3A0d0a2e283bcfc021884410130d3dba6b7b4edfc28223cf7a2e203c2b6b3e6a9b?arch=amd64\u0026repository_url=registry.redhat.io/network-observability/network-observability-rhel9-operator\u0026tag=1789979117"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:0550d8ac592cf476506a992d0d3f7beb4e6aa4414f259cda47a80e4749311537_arm64",
                "product": {
                  "name": "registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:0550d8ac592cf476506a992d0d3f7beb4e6aa4414f259cda47a80e4749311537_arm64",
                  "product_id": "registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:0550d8ac592cf476506a992d0d3f7beb4e6aa4414f259cda47a80e4749311537_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/network-observability-flowlogs-pipeline-rhel9@sha256%3A0550d8ac592cf476506a992d0d3f7beb4e6aa4414f259cda47a80e4749311537?arch=arm64\u0026repository_url=registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9\u0026tag=1789978651"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:0f2106026942ca06110301ece4f911b7ea0c50461cde3a5c8710e529c7f7c4c6_arm64",
                "product": {
                  "name": "registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:0f2106026942ca06110301ece4f911b7ea0c50461cde3a5c8710e529c7f7c4c6_arm64",
                  "product_id": "registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:0f2106026942ca06110301ece4f911b7ea0c50461cde3a5c8710e529c7f7c4c6_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/network-observability-ebpf-agent-rhel9@sha256%3A0f2106026942ca06110301ece4f911b7ea0c50461cde3a5c8710e529c7f7c4c6?arch=arm64\u0026repository_url=registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9\u0026tag=1789978991"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b307464aa7f189abb67b951542d74b1f89940412fd4d08ab89a9aac25de4fb38_arm64",
                "product": {
                  "name": "registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b307464aa7f189abb67b951542d74b1f89940412fd4d08ab89a9aac25de4fb38_arm64",
                  "product_id": "registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b307464aa7f189abb67b951542d74b1f89940412fd4d08ab89a9aac25de4fb38_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/network-observability-cli-rhel9@sha256%3Ab307464aa7f189abb67b951542d74b1f89940412fd4d08ab89a9aac25de4fb38?arch=arm64\u0026repository_url=registry.redhat.io/network-observability/network-observability-cli-rhel9\u0026tag=1789986279"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:ae786598501725df58ae66ce52607fb8f0c325456537cf41e55cae33ccd4e370_arm64",
                "product": {
                  "name": "registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:ae786598501725df58ae66ce52607fb8f0c325456537cf41e55cae33ccd4e370_arm64",
                  "product_id": "registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:ae786598501725df58ae66ce52607fb8f0c325456537cf41e55cae33ccd4e370_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/network-observability-console-plugin-pf4-rhel9@sha256%3Aae786598501725df58ae66ce52607fb8f0c325456537cf41e55cae33ccd4e370?arch=arm64\u0026repository_url=registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9\u0026tag=1789978275"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:0d78ff17f71f5f742aae872a9a15c48a5bf0baa328b85d627ae177bf2c88e3da_arm64",
                "product": {
                  "name": "registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:0d78ff17f71f5f742aae872a9a15c48a5bf0baa328b85d627ae177bf2c88e3da_arm64",
                  "product_id": "registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:0d78ff17f71f5f742aae872a9a15c48a5bf0baa328b85d627ae177bf2c88e3da_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/network-observability-console-plugin-pf5-rhel9@sha256%3A0d78ff17f71f5f742aae872a9a15c48a5bf0baa328b85d627ae177bf2c88e3da?arch=arm64\u0026repository_url=registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9\u0026tag=1789978780"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b2c2987a6048c3e65be46209059f78067a7d0ebdf8d4481c607a8f322696e903_arm64",
                "product": {
                  "name": "registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b2c2987a6048c3e65be46209059f78067a7d0ebdf8d4481c607a8f322696e903_arm64",
                  "product_id": "registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b2c2987a6048c3e65be46209059f78067a7d0ebdf8d4481c607a8f322696e903_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/network-observability-console-plugin-rhel9@sha256%3Ab2c2987a6048c3e65be46209059f78067a7d0ebdf8d4481c607a8f322696e903?arch=arm64\u0026repository_url=registry.redhat.io/network-observability/network-observability-console-plugin-rhel9\u0026tag=1789978277"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:065492e0defff65abc0c2fb776b19506e65ff65924e39eaa4e2488e884376dea_arm64",
                "product": {
                  "name": "registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:065492e0defff65abc0c2fb776b19506e65ff65924e39eaa4e2488e884376dea_arm64",
                  "product_id": "registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:065492e0defff65abc0c2fb776b19506e65ff65924e39eaa4e2488e884376dea_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/network-observability-rhel9-operator@sha256%3A065492e0defff65abc0c2fb776b19506e65ff65924e39eaa4e2488e884376dea?arch=arm64\u0026repository_url=registry.redhat.io/network-observability/network-observability-rhel9-operator\u0026tag=1789979117"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ebe846db7b0733c85850182d709103faf3725b27b2daa3b9d08b23212dbd5cca_ppc64le",
                "product": {
                  "name": "registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ebe846db7b0733c85850182d709103faf3725b27b2daa3b9d08b23212dbd5cca_ppc64le",
                  "product_id": "registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ebe846db7b0733c85850182d709103faf3725b27b2daa3b9d08b23212dbd5cca_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/network-observability-flowlogs-pipeline-rhel9@sha256%3Aebe846db7b0733c85850182d709103faf3725b27b2daa3b9d08b23212dbd5cca?arch=ppc64le\u0026repository_url=registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9\u0026tag=1789978651"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:068743012df5f7f0ce25e785630555ce532d50ec32a17a66e51108a5096ae38a_ppc64le",
                "product": {
                  "name": "registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:068743012df5f7f0ce25e785630555ce532d50ec32a17a66e51108a5096ae38a_ppc64le",
                  "product_id": "registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:068743012df5f7f0ce25e785630555ce532d50ec32a17a66e51108a5096ae38a_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/network-observability-ebpf-agent-rhel9@sha256%3A068743012df5f7f0ce25e785630555ce532d50ec32a17a66e51108a5096ae38a?arch=ppc64le\u0026repository_url=registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9\u0026tag=1789978991"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:ada851d78ec38f12688e6a64166767ddd1c960f6099604e0abf06d18ad74519a_ppc64le",
                "product": {
                  "name": "registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:ada851d78ec38f12688e6a64166767ddd1c960f6099604e0abf06d18ad74519a_ppc64le",
                  "product_id": "registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:ada851d78ec38f12688e6a64166767ddd1c960f6099604e0abf06d18ad74519a_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/network-observability-cli-rhel9@sha256%3Aada851d78ec38f12688e6a64166767ddd1c960f6099604e0abf06d18ad74519a?arch=ppc64le\u0026repository_url=registry.redhat.io/network-observability/network-observability-cli-rhel9\u0026tag=1789986279"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:667964ca0a8379a75425a90e7f1a3c109804e91b6fbc38aa9ecc72d57949925b_ppc64le",
                "product": {
                  "name": "registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:667964ca0a8379a75425a90e7f1a3c109804e91b6fbc38aa9ecc72d57949925b_ppc64le",
                  "product_id": "registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:667964ca0a8379a75425a90e7f1a3c109804e91b6fbc38aa9ecc72d57949925b_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/network-observability-console-plugin-pf4-rhel9@sha256%3A667964ca0a8379a75425a90e7f1a3c109804e91b6fbc38aa9ecc72d57949925b?arch=ppc64le\u0026repository_url=registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9\u0026tag=1789978275"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:1a51f636af388a11694876bcea3acb73885479b1b7e02417b4c13c8fde93ab2a_ppc64le",
                "product": {
                  "name": "registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:1a51f636af388a11694876bcea3acb73885479b1b7e02417b4c13c8fde93ab2a_ppc64le",
                  "product_id": "registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:1a51f636af388a11694876bcea3acb73885479b1b7e02417b4c13c8fde93ab2a_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/network-observability-console-plugin-pf5-rhel9@sha256%3A1a51f636af388a11694876bcea3acb73885479b1b7e02417b4c13c8fde93ab2a?arch=ppc64le\u0026repository_url=registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9\u0026tag=1789978780"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:5540377f87365b5501ec4bac45334b0fc1658635c3347505fa52fe11e6f9098f_ppc64le",
                "product": {
                  "name": "registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:5540377f87365b5501ec4bac45334b0fc1658635c3347505fa52fe11e6f9098f_ppc64le",
                  "product_id": "registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:5540377f87365b5501ec4bac45334b0fc1658635c3347505fa52fe11e6f9098f_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/network-observability-console-plugin-rhel9@sha256%3A5540377f87365b5501ec4bac45334b0fc1658635c3347505fa52fe11e6f9098f?arch=ppc64le\u0026repository_url=registry.redhat.io/network-observability/network-observability-console-plugin-rhel9\u0026tag=1789978277"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:42309d715ad9d81fd87b5e20d0ae8f41c4ec1f05f71e3b55b610ac6533d75253_ppc64le",
                "product": {
                  "name": "registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:42309d715ad9d81fd87b5e20d0ae8f41c4ec1f05f71e3b55b610ac6533d75253_ppc64le",
                  "product_id": "registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:42309d715ad9d81fd87b5e20d0ae8f41c4ec1f05f71e3b55b610ac6533d75253_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/network-observability-rhel9-operator@sha256%3A42309d715ad9d81fd87b5e20d0ae8f41c4ec1f05f71e3b55b610ac6533d75253?arch=ppc64le\u0026repository_url=registry.redhat.io/network-observability/network-observability-rhel9-operator\u0026tag=1789979117"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:e8e427cc5103d412b4677c3aa93912cb82a5b5db8be8d21992f4341bf404f75b_s390x",
                "product": {
                  "name": "registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:e8e427cc5103d412b4677c3aa93912cb82a5b5db8be8d21992f4341bf404f75b_s390x",
                  "product_id": "registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:e8e427cc5103d412b4677c3aa93912cb82a5b5db8be8d21992f4341bf404f75b_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/network-observability-flowlogs-pipeline-rhel9@sha256%3Ae8e427cc5103d412b4677c3aa93912cb82a5b5db8be8d21992f4341bf404f75b?arch=s390x\u0026repository_url=registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9\u0026tag=1789978651"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dae49f4e857b84f9bad0c3a477c43834cbea6118a719c793b00524ab19b7dc0a_s390x",
                "product": {
                  "name": "registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dae49f4e857b84f9bad0c3a477c43834cbea6118a719c793b00524ab19b7dc0a_s390x",
                  "product_id": "registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dae49f4e857b84f9bad0c3a477c43834cbea6118a719c793b00524ab19b7dc0a_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/network-observability-ebpf-agent-rhel9@sha256%3Adae49f4e857b84f9bad0c3a477c43834cbea6118a719c793b00524ab19b7dc0a?arch=s390x\u0026repository_url=registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9\u0026tag=1789978991"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:2fda4c6642fd343cf7bd0fe629e4d85ae95c5180b8f544c464980a7c7dde9e58_s390x",
                "product": {
                  "name": "registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:2fda4c6642fd343cf7bd0fe629e4d85ae95c5180b8f544c464980a7c7dde9e58_s390x",
                  "product_id": "registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:2fda4c6642fd343cf7bd0fe629e4d85ae95c5180b8f544c464980a7c7dde9e58_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/network-observability-cli-rhel9@sha256%3A2fda4c6642fd343cf7bd0fe629e4d85ae95c5180b8f544c464980a7c7dde9e58?arch=s390x\u0026repository_url=registry.redhat.io/network-observability/network-observability-cli-rhel9\u0026tag=1789986279"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:474cf8c7500c50dfd569180570f00d9649691a8621ce34f82957e53d2ad95a66_s390x",
                "product": {
                  "name": "registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:474cf8c7500c50dfd569180570f00d9649691a8621ce34f82957e53d2ad95a66_s390x",
                  "product_id": "registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:474cf8c7500c50dfd569180570f00d9649691a8621ce34f82957e53d2ad95a66_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/network-observability-console-plugin-pf4-rhel9@sha256%3A474cf8c7500c50dfd569180570f00d9649691a8621ce34f82957e53d2ad95a66?arch=s390x\u0026repository_url=registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9\u0026tag=1789978275"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:7aa9a1a8a24b2861178d0f64ae4593cc1668562f9844f405e05cf47e94229a09_s390x",
                "product": {
                  "name": "registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:7aa9a1a8a24b2861178d0f64ae4593cc1668562f9844f405e05cf47e94229a09_s390x",
                  "product_id": "registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:7aa9a1a8a24b2861178d0f64ae4593cc1668562f9844f405e05cf47e94229a09_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/network-observability-console-plugin-pf5-rhel9@sha256%3A7aa9a1a8a24b2861178d0f64ae4593cc1668562f9844f405e05cf47e94229a09?arch=s390x\u0026repository_url=registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9\u0026tag=1789978780"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:e3ab5b8e9d1b5306ee3e8bb46d54b5b7579653117db71f6f80bf4a7f0abbc62f_s390x",
                "product": {
                  "name": "registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:e3ab5b8e9d1b5306ee3e8bb46d54b5b7579653117db71f6f80bf4a7f0abbc62f_s390x",
                  "product_id": "registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:e3ab5b8e9d1b5306ee3e8bb46d54b5b7579653117db71f6f80bf4a7f0abbc62f_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/network-observability-console-plugin-rhel9@sha256%3Ae3ab5b8e9d1b5306ee3e8bb46d54b5b7579653117db71f6f80bf4a7f0abbc62f?arch=s390x\u0026repository_url=registry.redhat.io/network-observability/network-observability-console-plugin-rhel9\u0026tag=1789978277"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4e81294ae472aa938a644e4672b264f5a71e3935e83322c238c960cf8d440005_s390x",
                "product": {
                  "name": "registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4e81294ae472aa938a644e4672b264f5a71e3935e83322c238c960cf8d440005_s390x",
                  "product_id": "registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4e81294ae472aa938a644e4672b264f5a71e3935e83322c238c960cf8d440005_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/network-observability-rhel9-operator@sha256%3A4e81294ae472aa938a644e4672b264f5a71e3935e83322c238c960cf8d440005?arch=s390x\u0026repository_url=registry.redhat.io/network-observability/network-observability-rhel9-operator\u0026tag=1789979117"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:2fda4c6642fd343cf7bd0fe629e4d85ae95c5180b8f544c464980a7c7dde9e58_s390x as a component of Network Observability (NETOBSERV) 1.12.3",
          "product_id": "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:2fda4c6642fd343cf7bd0fe629e4d85ae95c5180b8f544c464980a7c7dde9e58_s390x"
        },
        "product_reference": "registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:2fda4c6642fd343cf7bd0fe629e4d85ae95c5180b8f544c464980a7c7dde9e58_s390x",
        "relates_to_product_reference": "Network Observability (NETOBSERV) 1.12.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:97a0788b5ac604ca74362198517f87499da2ec26dd449cf5fb7d6eddf28de9f6_amd64 as a component of Network Observability (NETOBSERV) 1.12.3",
          "product_id": "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:97a0788b5ac604ca74362198517f87499da2ec26dd449cf5fb7d6eddf28de9f6_amd64"
        },
        "product_reference": "registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:97a0788b5ac604ca74362198517f87499da2ec26dd449cf5fb7d6eddf28de9f6_amd64",
        "relates_to_product_reference": "Network Observability (NETOBSERV) 1.12.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:ada851d78ec38f12688e6a64166767ddd1c960f6099604e0abf06d18ad74519a_ppc64le as a component of Network Observability (NETOBSERV) 1.12.3",
          "product_id": "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:ada851d78ec38f12688e6a64166767ddd1c960f6099604e0abf06d18ad74519a_ppc64le"
        },
        "product_reference": "registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:ada851d78ec38f12688e6a64166767ddd1c960f6099604e0abf06d18ad74519a_ppc64le",
        "relates_to_product_reference": "Network Observability (NETOBSERV) 1.12.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b307464aa7f189abb67b951542d74b1f89940412fd4d08ab89a9aac25de4fb38_arm64 as a component of Network Observability (NETOBSERV) 1.12.3",
          "product_id": "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b307464aa7f189abb67b951542d74b1f89940412fd4d08ab89a9aac25de4fb38_arm64"
        },
        "product_reference": "registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b307464aa7f189abb67b951542d74b1f89940412fd4d08ab89a9aac25de4fb38_arm64",
        "relates_to_product_reference": "Network Observability (NETOBSERV) 1.12.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:474cf8c7500c50dfd569180570f00d9649691a8621ce34f82957e53d2ad95a66_s390x as a component of Network Observability (NETOBSERV) 1.12.3",
          "product_id": "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:474cf8c7500c50dfd569180570f00d9649691a8621ce34f82957e53d2ad95a66_s390x"
        },
        "product_reference": "registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:474cf8c7500c50dfd569180570f00d9649691a8621ce34f82957e53d2ad95a66_s390x",
        "relates_to_product_reference": "Network Observability (NETOBSERV) 1.12.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:667964ca0a8379a75425a90e7f1a3c109804e91b6fbc38aa9ecc72d57949925b_ppc64le as a component of Network Observability (NETOBSERV) 1.12.3",
          "product_id": "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:667964ca0a8379a75425a90e7f1a3c109804e91b6fbc38aa9ecc72d57949925b_ppc64le"
        },
        "product_reference": "registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:667964ca0a8379a75425a90e7f1a3c109804e91b6fbc38aa9ecc72d57949925b_ppc64le",
        "relates_to_product_reference": "Network Observability (NETOBSERV) 1.12.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:9d1fac43e376171a8666d299e4d06f50e102695266e5a8bf424886dcb7e305eb_amd64 as a component of Network Observability (NETOBSERV) 1.12.3",
          "product_id": "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:9d1fac43e376171a8666d299e4d06f50e102695266e5a8bf424886dcb7e305eb_amd64"
        },
        "product_reference": "registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:9d1fac43e376171a8666d299e4d06f50e102695266e5a8bf424886dcb7e305eb_amd64",
        "relates_to_product_reference": "Network Observability (NETOBSERV) 1.12.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:ae786598501725df58ae66ce52607fb8f0c325456537cf41e55cae33ccd4e370_arm64 as a component of Network Observability (NETOBSERV) 1.12.3",
          "product_id": "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:ae786598501725df58ae66ce52607fb8f0c325456537cf41e55cae33ccd4e370_arm64"
        },
        "product_reference": "registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:ae786598501725df58ae66ce52607fb8f0c325456537cf41e55cae33ccd4e370_arm64",
        "relates_to_product_reference": "Network Observability (NETOBSERV) 1.12.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:0d78ff17f71f5f742aae872a9a15c48a5bf0baa328b85d627ae177bf2c88e3da_arm64 as a component of Network Observability (NETOBSERV) 1.12.3",
          "product_id": "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:0d78ff17f71f5f742aae872a9a15c48a5bf0baa328b85d627ae177bf2c88e3da_arm64"
        },
        "product_reference": "registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:0d78ff17f71f5f742aae872a9a15c48a5bf0baa328b85d627ae177bf2c88e3da_arm64",
        "relates_to_product_reference": "Network Observability (NETOBSERV) 1.12.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:1a51f636af388a11694876bcea3acb73885479b1b7e02417b4c13c8fde93ab2a_ppc64le as a component of Network Observability (NETOBSERV) 1.12.3",
          "product_id": "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:1a51f636af388a11694876bcea3acb73885479b1b7e02417b4c13c8fde93ab2a_ppc64le"
        },
        "product_reference": "registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:1a51f636af388a11694876bcea3acb73885479b1b7e02417b4c13c8fde93ab2a_ppc64le",
        "relates_to_product_reference": "Network Observability (NETOBSERV) 1.12.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:7aa9a1a8a24b2861178d0f64ae4593cc1668562f9844f405e05cf47e94229a09_s390x as a component of Network Observability (NETOBSERV) 1.12.3",
          "product_id": "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:7aa9a1a8a24b2861178d0f64ae4593cc1668562f9844f405e05cf47e94229a09_s390x"
        },
        "product_reference": "registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:7aa9a1a8a24b2861178d0f64ae4593cc1668562f9844f405e05cf47e94229a09_s390x",
        "relates_to_product_reference": "Network Observability (NETOBSERV) 1.12.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:e9e0770bdb543dd42aa3c3aa5014cbf19d913da8f58e4d69eb58132421137ac6_amd64 as a component of Network Observability (NETOBSERV) 1.12.3",
          "product_id": "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:e9e0770bdb543dd42aa3c3aa5014cbf19d913da8f58e4d69eb58132421137ac6_amd64"
        },
        "product_reference": "registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:e9e0770bdb543dd42aa3c3aa5014cbf19d913da8f58e4d69eb58132421137ac6_amd64",
        "relates_to_product_reference": "Network Observability (NETOBSERV) 1.12.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:5540377f87365b5501ec4bac45334b0fc1658635c3347505fa52fe11e6f9098f_ppc64le as a component of Network Observability (NETOBSERV) 1.12.3",
          "product_id": "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:5540377f87365b5501ec4bac45334b0fc1658635c3347505fa52fe11e6f9098f_ppc64le"
        },
        "product_reference": "registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:5540377f87365b5501ec4bac45334b0fc1658635c3347505fa52fe11e6f9098f_ppc64le",
        "relates_to_product_reference": "Network Observability (NETOBSERV) 1.12.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b2c2987a6048c3e65be46209059f78067a7d0ebdf8d4481c607a8f322696e903_arm64 as a component of Network Observability (NETOBSERV) 1.12.3",
          "product_id": "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b2c2987a6048c3e65be46209059f78067a7d0ebdf8d4481c607a8f322696e903_arm64"
        },
        "product_reference": "registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b2c2987a6048c3e65be46209059f78067a7d0ebdf8d4481c607a8f322696e903_arm64",
        "relates_to_product_reference": "Network Observability (NETOBSERV) 1.12.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:e3ab5b8e9d1b5306ee3e8bb46d54b5b7579653117db71f6f80bf4a7f0abbc62f_s390x as a component of Network Observability (NETOBSERV) 1.12.3",
          "product_id": "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:e3ab5b8e9d1b5306ee3e8bb46d54b5b7579653117db71f6f80bf4a7f0abbc62f_s390x"
        },
        "product_reference": "registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:e3ab5b8e9d1b5306ee3e8bb46d54b5b7579653117db71f6f80bf4a7f0abbc62f_s390x",
        "relates_to_product_reference": "Network Observability (NETOBSERV) 1.12.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:fb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a_amd64 as a component of Network Observability (NETOBSERV) 1.12.3",
          "product_id": "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:fb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a_amd64"
        },
        "product_reference": "registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:fb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a_amd64",
        "relates_to_product_reference": "Network Observability (NETOBSERV) 1.12.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:068743012df5f7f0ce25e785630555ce532d50ec32a17a66e51108a5096ae38a_ppc64le as a component of Network Observability (NETOBSERV) 1.12.3",
          "product_id": "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:068743012df5f7f0ce25e785630555ce532d50ec32a17a66e51108a5096ae38a_ppc64le"
        },
        "product_reference": "registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:068743012df5f7f0ce25e785630555ce532d50ec32a17a66e51108a5096ae38a_ppc64le",
        "relates_to_product_reference": "Network Observability (NETOBSERV) 1.12.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:0f2106026942ca06110301ece4f911b7ea0c50461cde3a5c8710e529c7f7c4c6_arm64 as a component of Network Observability (NETOBSERV) 1.12.3",
          "product_id": "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:0f2106026942ca06110301ece4f911b7ea0c50461cde3a5c8710e529c7f7c4c6_arm64"
        },
        "product_reference": "registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:0f2106026942ca06110301ece4f911b7ea0c50461cde3a5c8710e529c7f7c4c6_arm64",
        "relates_to_product_reference": "Network Observability (NETOBSERV) 1.12.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dae49f4e857b84f9bad0c3a477c43834cbea6118a719c793b00524ab19b7dc0a_s390x as a component of Network Observability (NETOBSERV) 1.12.3",
          "product_id": "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dae49f4e857b84f9bad0c3a477c43834cbea6118a719c793b00524ab19b7dc0a_s390x"
        },
        "product_reference": "registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dae49f4e857b84f9bad0c3a477c43834cbea6118a719c793b00524ab19b7dc0a_s390x",
        "relates_to_product_reference": "Network Observability (NETOBSERV) 1.12.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:eb5f0c7e8418bde2c4a059b8f7600f478cfbd3ff46f8f8fc407b50e8dc88691b_amd64 as a component of Network Observability (NETOBSERV) 1.12.3",
          "product_id": "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:eb5f0c7e8418bde2c4a059b8f7600f478cfbd3ff46f8f8fc407b50e8dc88691b_amd64"
        },
        "product_reference": "registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:eb5f0c7e8418bde2c4a059b8f7600f478cfbd3ff46f8f8fc407b50e8dc88691b_amd64",
        "relates_to_product_reference": "Network Observability (NETOBSERV) 1.12.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:0550d8ac592cf476506a992d0d3f7beb4e6aa4414f259cda47a80e4749311537_arm64 as a component of Network Observability (NETOBSERV) 1.12.3",
          "product_id": "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:0550d8ac592cf476506a992d0d3f7beb4e6aa4414f259cda47a80e4749311537_arm64"
        },
        "product_reference": "registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:0550d8ac592cf476506a992d0d3f7beb4e6aa4414f259cda47a80e4749311537_arm64",
        "relates_to_product_reference": "Network Observability (NETOBSERV) 1.12.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b19bfad20ee4fb3de2075251b3eb2c1ea6a76b68edac2c3bbd4523c0aa0346a8_amd64 as a component of Network Observability (NETOBSERV) 1.12.3",
          "product_id": "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b19bfad20ee4fb3de2075251b3eb2c1ea6a76b68edac2c3bbd4523c0aa0346a8_amd64"
        },
        "product_reference": "registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b19bfad20ee4fb3de2075251b3eb2c1ea6a76b68edac2c3bbd4523c0aa0346a8_amd64",
        "relates_to_product_reference": "Network Observability (NETOBSERV) 1.12.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:e8e427cc5103d412b4677c3aa93912cb82a5b5db8be8d21992f4341bf404f75b_s390x as a component of Network Observability (NETOBSERV) 1.12.3",
          "product_id": "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:e8e427cc5103d412b4677c3aa93912cb82a5b5db8be8d21992f4341bf404f75b_s390x"
        },
        "product_reference": "registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:e8e427cc5103d412b4677c3aa93912cb82a5b5db8be8d21992f4341bf404f75b_s390x",
        "relates_to_product_reference": "Network Observability (NETOBSERV) 1.12.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ebe846db7b0733c85850182d709103faf3725b27b2daa3b9d08b23212dbd5cca_ppc64le as a component of Network Observability (NETOBSERV) 1.12.3",
          "product_id": "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ebe846db7b0733c85850182d709103faf3725b27b2daa3b9d08b23212dbd5cca_ppc64le"
        },
        "product_reference": "registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ebe846db7b0733c85850182d709103faf3725b27b2daa3b9d08b23212dbd5cca_ppc64le",
        "relates_to_product_reference": "Network Observability (NETOBSERV) 1.12.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:f838339b4bd024f76fead96f23892c7800ffdfb243538369bed23c4f64eef8e3_amd64 as a component of Network Observability (NETOBSERV) 1.12.3",
          "product_id": "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:f838339b4bd024f76fead96f23892c7800ffdfb243538369bed23c4f64eef8e3_amd64"
        },
        "product_reference": "registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:f838339b4bd024f76fead96f23892c7800ffdfb243538369bed23c4f64eef8e3_amd64",
        "relates_to_product_reference": "Network Observability (NETOBSERV) 1.12.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:065492e0defff65abc0c2fb776b19506e65ff65924e39eaa4e2488e884376dea_arm64 as a component of Network Observability (NETOBSERV) 1.12.3",
          "product_id": "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:065492e0defff65abc0c2fb776b19506e65ff65924e39eaa4e2488e884376dea_arm64"
        },
        "product_reference": "registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:065492e0defff65abc0c2fb776b19506e65ff65924e39eaa4e2488e884376dea_arm64",
        "relates_to_product_reference": "Network Observability (NETOBSERV) 1.12.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:0d0a2e283bcfc021884410130d3dba6b7b4edfc28223cf7a2e203c2b6b3e6a9b_amd64 as a component of Network Observability (NETOBSERV) 1.12.3",
          "product_id": "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:0d0a2e283bcfc021884410130d3dba6b7b4edfc28223cf7a2e203c2b6b3e6a9b_amd64"
        },
        "product_reference": "registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:0d0a2e283bcfc021884410130d3dba6b7b4edfc28223cf7a2e203c2b6b3e6a9b_amd64",
        "relates_to_product_reference": "Network Observability (NETOBSERV) 1.12.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:42309d715ad9d81fd87b5e20d0ae8f41c4ec1f05f71e3b55b610ac6533d75253_ppc64le as a component of Network Observability (NETOBSERV) 1.12.3",
          "product_id": "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:42309d715ad9d81fd87b5e20d0ae8f41c4ec1f05f71e3b55b610ac6533d75253_ppc64le"
        },
        "product_reference": "registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:42309d715ad9d81fd87b5e20d0ae8f41c4ec1f05f71e3b55b610ac6533d75253_ppc64le",
        "relates_to_product_reference": "Network Observability (NETOBSERV) 1.12.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4e81294ae472aa938a644e4672b264f5a71e3935e83322c238c960cf8d440005_s390x as a component of Network Observability (NETOBSERV) 1.12.3",
          "product_id": "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4e81294ae472aa938a644e4672b264f5a71e3935e83322c238c960cf8d440005_s390x"
        },
        "product_reference": "registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4e81294ae472aa938a644e4672b264f5a71e3935e83322c238c960cf8d440005_s390x",
        "relates_to_product_reference": "Network Observability (NETOBSERV) 1.12.3"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-33818",
      "cwe": {
        "id": "CWE-776",
        "name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
      },
      "discovery_date": "2026-08-13T22:12:37.151735+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:474cf8c7500c50dfd569180570f00d9649691a8621ce34f82957e53d2ad95a66_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:667964ca0a8379a75425a90e7f1a3c109804e91b6fbc38aa9ecc72d57949925b_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:9d1fac43e376171a8666d299e4d06f50e102695266e5a8bf424886dcb7e305eb_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:ae786598501725df58ae66ce52607fb8f0c325456537cf41e55cae33ccd4e370_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:0d78ff17f71f5f742aae872a9a15c48a5bf0baa328b85d627ae177bf2c88e3da_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:1a51f636af388a11694876bcea3acb73885479b1b7e02417b4c13c8fde93ab2a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:7aa9a1a8a24b2861178d0f64ae4593cc1668562f9844f405e05cf47e94229a09_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:e9e0770bdb543dd42aa3c3aa5014cbf19d913da8f58e4d69eb58132421137ac6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:5540377f87365b5501ec4bac45334b0fc1658635c3347505fa52fe11e6f9098f_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b2c2987a6048c3e65be46209059f78067a7d0ebdf8d4481c607a8f322696e903_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:e3ab5b8e9d1b5306ee3e8bb46d54b5b7579653117db71f6f80bf4a7f0abbc62f_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:fb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:068743012df5f7f0ce25e785630555ce532d50ec32a17a66e51108a5096ae38a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:0f2106026942ca06110301ece4f911b7ea0c50461cde3a5c8710e529c7f7c4c6_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dae49f4e857b84f9bad0c3a477c43834cbea6118a719c793b00524ab19b7dc0a_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:eb5f0c7e8418bde2c4a059b8f7600f478cfbd3ff46f8f8fc407b50e8dc88691b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:0550d8ac592cf476506a992d0d3f7beb4e6aa4414f259cda47a80e4749311537_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b19bfad20ee4fb3de2075251b3eb2c1ea6a76b68edac2c3bbd4523c0aa0346a8_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:e8e427cc5103d412b4677c3aa93912cb82a5b5db8be8d21992f4341bf404f75b_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ebe846db7b0733c85850182d709103faf3725b27b2daa3b9d08b23212dbd5cca_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:f838339b4bd024f76fead96f23892c7800ffdfb243538369bed23c4f64eef8e3_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:065492e0defff65abc0c2fb776b19506e65ff65924e39eaa4e2488e884376dea_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:0d0a2e283bcfc021884410130d3dba6b7b4edfc28223cf7a2e203c2b6b3e6a9b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:42309d715ad9d81fd87b5e20d0ae8f41c4ec1f05f71e3b55b610ac6533d75253_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4e81294ae472aa938a644e4672b264f5a71e3935e83322c238c960cf8d440005_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515815"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `encoding/asn1` package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One (ASN.1) structure, leading to excessive recursion during the `Unmarshal` operation. This could result in stack exhaustion and a Denial of Service (DoS) condition.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service flaw in the Go encoding/asn1 package, as it can be triggered remotely without authentication. An attacker can provide a malformed ASN.1 structure, causing excessive recursion during unmarshalling and leading to stack exhaustion, which can render the service unavailable.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:2fda4c6642fd343cf7bd0fe629e4d85ae95c5180b8f544c464980a7c7dde9e58_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:97a0788b5ac604ca74362198517f87499da2ec26dd449cf5fb7d6eddf28de9f6_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:ada851d78ec38f12688e6a64166767ddd1c960f6099604e0abf06d18ad74519a_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b307464aa7f189abb67b951542d74b1f89940412fd4d08ab89a9aac25de4fb38_arm64"
        ],
        "known_not_affected": [
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:474cf8c7500c50dfd569180570f00d9649691a8621ce34f82957e53d2ad95a66_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:667964ca0a8379a75425a90e7f1a3c109804e91b6fbc38aa9ecc72d57949925b_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:9d1fac43e376171a8666d299e4d06f50e102695266e5a8bf424886dcb7e305eb_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:ae786598501725df58ae66ce52607fb8f0c325456537cf41e55cae33ccd4e370_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:0d78ff17f71f5f742aae872a9a15c48a5bf0baa328b85d627ae177bf2c88e3da_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:1a51f636af388a11694876bcea3acb73885479b1b7e02417b4c13c8fde93ab2a_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:7aa9a1a8a24b2861178d0f64ae4593cc1668562f9844f405e05cf47e94229a09_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:e9e0770bdb543dd42aa3c3aa5014cbf19d913da8f58e4d69eb58132421137ac6_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:5540377f87365b5501ec4bac45334b0fc1658635c3347505fa52fe11e6f9098f_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b2c2987a6048c3e65be46209059f78067a7d0ebdf8d4481c607a8f322696e903_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:e3ab5b8e9d1b5306ee3e8bb46d54b5b7579653117db71f6f80bf4a7f0abbc62f_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:fb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:068743012df5f7f0ce25e785630555ce532d50ec32a17a66e51108a5096ae38a_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:0f2106026942ca06110301ece4f911b7ea0c50461cde3a5c8710e529c7f7c4c6_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dae49f4e857b84f9bad0c3a477c43834cbea6118a719c793b00524ab19b7dc0a_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:eb5f0c7e8418bde2c4a059b8f7600f478cfbd3ff46f8f8fc407b50e8dc88691b_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:0550d8ac592cf476506a992d0d3f7beb4e6aa4414f259cda47a80e4749311537_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b19bfad20ee4fb3de2075251b3eb2c1ea6a76b68edac2c3bbd4523c0aa0346a8_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:e8e427cc5103d412b4677c3aa93912cb82a5b5db8be8d21992f4341bf404f75b_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ebe846db7b0733c85850182d709103faf3725b27b2daa3b9d08b23212dbd5cca_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:f838339b4bd024f76fead96f23892c7800ffdfb243538369bed23c4f64eef8e3_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:065492e0defff65abc0c2fb776b19506e65ff65924e39eaa4e2488e884376dea_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:0d0a2e283bcfc021884410130d3dba6b7b4edfc28223cf7a2e203c2b6b3e6a9b_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:42309d715ad9d81fd87b5e20d0ae8f41c4ec1f05f71e3b55b610ac6533d75253_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4e81294ae472aa938a644e4672b264f5a71e3935e83322c238c960cf8d440005_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33818"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515815",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515815"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33818",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33818"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33818",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33818"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/814980",
          "url": "https://go.dev/cl/814980"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80405",
          "url": "https://go.dev/issue/80405"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5972",
          "url": "https://pkg.go.dev/vuln/GO-2026-5972"
        }
      ],
      "release_date": "2026-08-13T21:58:52.821000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-23T06:31:49+00:00",
          "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:2fda4c6642fd343cf7bd0fe629e4d85ae95c5180b8f544c464980a7c7dde9e58_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:97a0788b5ac604ca74362198517f87499da2ec26dd449cf5fb7d6eddf28de9f6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:ada851d78ec38f12688e6a64166767ddd1c960f6099604e0abf06d18ad74519a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b307464aa7f189abb67b951542d74b1f89940412fd4d08ab89a9aac25de4fb38_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:70593"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:2fda4c6642fd343cf7bd0fe629e4d85ae95c5180b8f544c464980a7c7dde9e58_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:97a0788b5ac604ca74362198517f87499da2ec26dd449cf5fb7d6eddf28de9f6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:ada851d78ec38f12688e6a64166767ddd1c960f6099604e0abf06d18ad74519a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b307464aa7f189abb67b951542d74b1f89940412fd4d08ab89a9aac25de4fb38_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:474cf8c7500c50dfd569180570f00d9649691a8621ce34f82957e53d2ad95a66_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:667964ca0a8379a75425a90e7f1a3c109804e91b6fbc38aa9ecc72d57949925b_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:9d1fac43e376171a8666d299e4d06f50e102695266e5a8bf424886dcb7e305eb_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:ae786598501725df58ae66ce52607fb8f0c325456537cf41e55cae33ccd4e370_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:0d78ff17f71f5f742aae872a9a15c48a5bf0baa328b85d627ae177bf2c88e3da_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:1a51f636af388a11694876bcea3acb73885479b1b7e02417b4c13c8fde93ab2a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:7aa9a1a8a24b2861178d0f64ae4593cc1668562f9844f405e05cf47e94229a09_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:e9e0770bdb543dd42aa3c3aa5014cbf19d913da8f58e4d69eb58132421137ac6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:5540377f87365b5501ec4bac45334b0fc1658635c3347505fa52fe11e6f9098f_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b2c2987a6048c3e65be46209059f78067a7d0ebdf8d4481c607a8f322696e903_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:e3ab5b8e9d1b5306ee3e8bb46d54b5b7579653117db71f6f80bf4a7f0abbc62f_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:fb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:068743012df5f7f0ce25e785630555ce532d50ec32a17a66e51108a5096ae38a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:0f2106026942ca06110301ece4f911b7ea0c50461cde3a5c8710e529c7f7c4c6_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dae49f4e857b84f9bad0c3a477c43834cbea6118a719c793b00524ab19b7dc0a_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:eb5f0c7e8418bde2c4a059b8f7600f478cfbd3ff46f8f8fc407b50e8dc88691b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:0550d8ac592cf476506a992d0d3f7beb4e6aa4414f259cda47a80e4749311537_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b19bfad20ee4fb3de2075251b3eb2c1ea6a76b68edac2c3bbd4523c0aa0346a8_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:e8e427cc5103d412b4677c3aa93912cb82a5b5db8be8d21992f4341bf404f75b_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ebe846db7b0733c85850182d709103faf3725b27b2daa3b9d08b23212dbd5cca_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:f838339b4bd024f76fead96f23892c7800ffdfb243538369bed23c4f64eef8e3_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:065492e0defff65abc0c2fb776b19506e65ff65924e39eaa4e2488e884376dea_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:0d0a2e283bcfc021884410130d3dba6b7b4edfc28223cf7a2e203c2b6b3e6a9b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:42309d715ad9d81fd87b5e20d0ae8f41c4ec1f05f71e3b55b610ac6533d75253_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4e81294ae472aa938a644e4672b264f5a71e3935e83322c238c960cf8d440005_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal"
    },
    {
      "cve": "CVE-2026-56852",
      "cwe": {
        "id": "CWE-835",
        "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
      },
      "discovery_date": "2026-07-21T20:01:56.266823+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:474cf8c7500c50dfd569180570f00d9649691a8621ce34f82957e53d2ad95a66_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:667964ca0a8379a75425a90e7f1a3c109804e91b6fbc38aa9ecc72d57949925b_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:9d1fac43e376171a8666d299e4d06f50e102695266e5a8bf424886dcb7e305eb_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:ae786598501725df58ae66ce52607fb8f0c325456537cf41e55cae33ccd4e370_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:0d78ff17f71f5f742aae872a9a15c48a5bf0baa328b85d627ae177bf2c88e3da_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:1a51f636af388a11694876bcea3acb73885479b1b7e02417b4c13c8fde93ab2a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:7aa9a1a8a24b2861178d0f64ae4593cc1668562f9844f405e05cf47e94229a09_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:e9e0770bdb543dd42aa3c3aa5014cbf19d913da8f58e4d69eb58132421137ac6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:5540377f87365b5501ec4bac45334b0fc1658635c3347505fa52fe11e6f9098f_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b2c2987a6048c3e65be46209059f78067a7d0ebdf8d4481c607a8f322696e903_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:e3ab5b8e9d1b5306ee3e8bb46d54b5b7579653117db71f6f80bf4a7f0abbc62f_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:fb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:068743012df5f7f0ce25e785630555ce532d50ec32a17a66e51108a5096ae38a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:0f2106026942ca06110301ece4f911b7ea0c50461cde3a5c8710e529c7f7c4c6_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dae49f4e857b84f9bad0c3a477c43834cbea6118a719c793b00524ab19b7dc0a_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:eb5f0c7e8418bde2c4a059b8f7600f478cfbd3ff46f8f8fc407b50e8dc88691b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:0550d8ac592cf476506a992d0d3f7beb4e6aa4414f259cda47a80e4749311537_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b19bfad20ee4fb3de2075251b3eb2c1ea6a76b68edac2c3bbd4523c0aa0346a8_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:e8e427cc5103d412b4677c3aa93912cb82a5b5db8be8d21992f4341bf404f75b_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ebe846db7b0733c85850182d709103faf3725b27b2daa3b9d08b23212dbd5cca_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:f838339b4bd024f76fead96f23892c7800ffdfb243538369bed23c4f64eef8e3_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:065492e0defff65abc0c2fb776b19506e65ff65924e39eaa4e2488e884376dea_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:0d0a2e283bcfc021884410130d3dba6b7b4edfc28223cf7a2e203c2b6b3e6a9b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:42309d715ad9d81fd87b5e20d0ae8f41c4ec1f05f71e3b55b610ac6533d75253_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4e81294ae472aa938a644e4672b264f5a71e3935e83322c238c960cf8d440005_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2504233"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/text. The norm.Iter component can enter an infinite loop when processing input that contains invalid UTF-8 (Unicode Transformation Format - 8-bit) bytes. A remote attacker could exploit this vulnerability by providing specially crafted input, leading to a Denial of Service (DoS) condition where the affected application becomes unresponsive.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Important: This flaw in the `golang.org/x/text` library can lead to a denial of service. An attacker could provide specially crafted invalid UTF-8 input to an application using the affected `norm.Iter` functionality, causing it to enter an infinite loop and become unresponsive.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:2fda4c6642fd343cf7bd0fe629e4d85ae95c5180b8f544c464980a7c7dde9e58_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:97a0788b5ac604ca74362198517f87499da2ec26dd449cf5fb7d6eddf28de9f6_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:ada851d78ec38f12688e6a64166767ddd1c960f6099604e0abf06d18ad74519a_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b307464aa7f189abb67b951542d74b1f89940412fd4d08ab89a9aac25de4fb38_arm64"
        ],
        "known_not_affected": [
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:474cf8c7500c50dfd569180570f00d9649691a8621ce34f82957e53d2ad95a66_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:667964ca0a8379a75425a90e7f1a3c109804e91b6fbc38aa9ecc72d57949925b_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:9d1fac43e376171a8666d299e4d06f50e102695266e5a8bf424886dcb7e305eb_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:ae786598501725df58ae66ce52607fb8f0c325456537cf41e55cae33ccd4e370_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:0d78ff17f71f5f742aae872a9a15c48a5bf0baa328b85d627ae177bf2c88e3da_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:1a51f636af388a11694876bcea3acb73885479b1b7e02417b4c13c8fde93ab2a_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:7aa9a1a8a24b2861178d0f64ae4593cc1668562f9844f405e05cf47e94229a09_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:e9e0770bdb543dd42aa3c3aa5014cbf19d913da8f58e4d69eb58132421137ac6_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:5540377f87365b5501ec4bac45334b0fc1658635c3347505fa52fe11e6f9098f_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b2c2987a6048c3e65be46209059f78067a7d0ebdf8d4481c607a8f322696e903_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:e3ab5b8e9d1b5306ee3e8bb46d54b5b7579653117db71f6f80bf4a7f0abbc62f_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:fb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:068743012df5f7f0ce25e785630555ce532d50ec32a17a66e51108a5096ae38a_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:0f2106026942ca06110301ece4f911b7ea0c50461cde3a5c8710e529c7f7c4c6_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dae49f4e857b84f9bad0c3a477c43834cbea6118a719c793b00524ab19b7dc0a_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:eb5f0c7e8418bde2c4a059b8f7600f478cfbd3ff46f8f8fc407b50e8dc88691b_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:0550d8ac592cf476506a992d0d3f7beb4e6aa4414f259cda47a80e4749311537_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b19bfad20ee4fb3de2075251b3eb2c1ea6a76b68edac2c3bbd4523c0aa0346a8_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:e8e427cc5103d412b4677c3aa93912cb82a5b5db8be8d21992f4341bf404f75b_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ebe846db7b0733c85850182d709103faf3725b27b2daa3b9d08b23212dbd5cca_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:f838339b4bd024f76fead96f23892c7800ffdfb243538369bed23c4f64eef8e3_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:065492e0defff65abc0c2fb776b19506e65ff65924e39eaa4e2488e884376dea_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:0d0a2e283bcfc021884410130d3dba6b7b4edfc28223cf7a2e203c2b6b3e6a9b_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:42309d715ad9d81fd87b5e20d0ae8f41c4ec1f05f71e3b55b610ac6533d75253_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4e81294ae472aa938a644e4672b264f5a71e3935e83322c238c960cf8d440005_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56852"
        },
        {
          "category": "external",
          "summary": "RHBZ#2504233",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2504233"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56852",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56852"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56852",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56852"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/794100",
          "url": "https://go.dev/cl/794100"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80142",
          "url": "https://go.dev/issue/80142"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5970",
          "url": "https://pkg.go.dev/vuln/GO-2026-5970"
        }
      ],
      "release_date": "2026-07-21T19:18:59.951000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-23T06:31:49+00:00",
          "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:2fda4c6642fd343cf7bd0fe629e4d85ae95c5180b8f544c464980a7c7dde9e58_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:97a0788b5ac604ca74362198517f87499da2ec26dd449cf5fb7d6eddf28de9f6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:ada851d78ec38f12688e6a64166767ddd1c960f6099604e0abf06d18ad74519a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b307464aa7f189abb67b951542d74b1f89940412fd4d08ab89a9aac25de4fb38_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:70593"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:2fda4c6642fd343cf7bd0fe629e4d85ae95c5180b8f544c464980a7c7dde9e58_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:97a0788b5ac604ca74362198517f87499da2ec26dd449cf5fb7d6eddf28de9f6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:ada851d78ec38f12688e6a64166767ddd1c960f6099604e0abf06d18ad74519a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b307464aa7f189abb67b951542d74b1f89940412fd4d08ab89a9aac25de4fb38_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:474cf8c7500c50dfd569180570f00d9649691a8621ce34f82957e53d2ad95a66_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:667964ca0a8379a75425a90e7f1a3c109804e91b6fbc38aa9ecc72d57949925b_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:9d1fac43e376171a8666d299e4d06f50e102695266e5a8bf424886dcb7e305eb_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:ae786598501725df58ae66ce52607fb8f0c325456537cf41e55cae33ccd4e370_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:0d78ff17f71f5f742aae872a9a15c48a5bf0baa328b85d627ae177bf2c88e3da_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:1a51f636af388a11694876bcea3acb73885479b1b7e02417b4c13c8fde93ab2a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:7aa9a1a8a24b2861178d0f64ae4593cc1668562f9844f405e05cf47e94229a09_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:e9e0770bdb543dd42aa3c3aa5014cbf19d913da8f58e4d69eb58132421137ac6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:5540377f87365b5501ec4bac45334b0fc1658635c3347505fa52fe11e6f9098f_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b2c2987a6048c3e65be46209059f78067a7d0ebdf8d4481c607a8f322696e903_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:e3ab5b8e9d1b5306ee3e8bb46d54b5b7579653117db71f6f80bf4a7f0abbc62f_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:fb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:068743012df5f7f0ce25e785630555ce532d50ec32a17a66e51108a5096ae38a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:0f2106026942ca06110301ece4f911b7ea0c50461cde3a5c8710e529c7f7c4c6_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dae49f4e857b84f9bad0c3a477c43834cbea6118a719c793b00524ab19b7dc0a_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:eb5f0c7e8418bde2c4a059b8f7600f478cfbd3ff46f8f8fc407b50e8dc88691b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:0550d8ac592cf476506a992d0d3f7beb4e6aa4414f259cda47a80e4749311537_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b19bfad20ee4fb3de2075251b3eb2c1ea6a76b68edac2c3bbd4523c0aa0346a8_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:e8e427cc5103d412b4677c3aa93912cb82a5b5db8be8d21992f4341bf404f75b_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ebe846db7b0733c85850182d709103faf3725b27b2daa3b9d08b23212dbd5cca_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:f838339b4bd024f76fead96f23892c7800ffdfb243538369bed23c4f64eef8e3_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:065492e0defff65abc0c2fb776b19506e65ff65924e39eaa4e2488e884376dea_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:0d0a2e283bcfc021884410130d3dba6b7b4edfc28223cf7a2e203c2b6b3e6a9b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:42309d715ad9d81fd87b5e20d0ae8f41c4ec1f05f71e3b55b610ac6533d75253_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4e81294ae472aa938a644e4672b264f5a71e3935e83322c238c960cf8d440005_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:2fda4c6642fd343cf7bd0fe629e4d85ae95c5180b8f544c464980a7c7dde9e58_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:97a0788b5ac604ca74362198517f87499da2ec26dd449cf5fb7d6eddf28de9f6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:ada851d78ec38f12688e6a64166767ddd1c960f6099604e0abf06d18ad74519a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b307464aa7f189abb67b951542d74b1f89940412fd4d08ab89a9aac25de4fb38_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:474cf8c7500c50dfd569180570f00d9649691a8621ce34f82957e53d2ad95a66_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:667964ca0a8379a75425a90e7f1a3c109804e91b6fbc38aa9ecc72d57949925b_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:9d1fac43e376171a8666d299e4d06f50e102695266e5a8bf424886dcb7e305eb_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:ae786598501725df58ae66ce52607fb8f0c325456537cf41e55cae33ccd4e370_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:0d78ff17f71f5f742aae872a9a15c48a5bf0baa328b85d627ae177bf2c88e3da_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:1a51f636af388a11694876bcea3acb73885479b1b7e02417b4c13c8fde93ab2a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:7aa9a1a8a24b2861178d0f64ae4593cc1668562f9844f405e05cf47e94229a09_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:e9e0770bdb543dd42aa3c3aa5014cbf19d913da8f58e4d69eb58132421137ac6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:5540377f87365b5501ec4bac45334b0fc1658635c3347505fa52fe11e6f9098f_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b2c2987a6048c3e65be46209059f78067a7d0ebdf8d4481c607a8f322696e903_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:e3ab5b8e9d1b5306ee3e8bb46d54b5b7579653117db71f6f80bf4a7f0abbc62f_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:fb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:068743012df5f7f0ce25e785630555ce532d50ec32a17a66e51108a5096ae38a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:0f2106026942ca06110301ece4f911b7ea0c50461cde3a5c8710e529c7f7c4c6_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dae49f4e857b84f9bad0c3a477c43834cbea6118a719c793b00524ab19b7dc0a_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:eb5f0c7e8418bde2c4a059b8f7600f478cfbd3ff46f8f8fc407b50e8dc88691b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:0550d8ac592cf476506a992d0d3f7beb4e6aa4414f259cda47a80e4749311537_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b19bfad20ee4fb3de2075251b3eb2c1ea6a76b68edac2c3bbd4523c0aa0346a8_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:e8e427cc5103d412b4677c3aa93912cb82a5b5db8be8d21992f4341bf404f75b_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ebe846db7b0733c85850182d709103faf3725b27b2daa3b9d08b23212dbd5cca_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:f838339b4bd024f76fead96f23892c7800ffdfb243538369bed23c4f64eef8e3_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:065492e0defff65abc0c2fb776b19506e65ff65924e39eaa4e2488e884376dea_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:0d0a2e283bcfc021884410130d3dba6b7b4edfc28223cf7a2e203c2b6b3e6a9b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:42309d715ad9d81fd87b5e20d0ae8f41c4ec1f05f71e3b55b610ac6533d75253_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4e81294ae472aa938a644e4672b264f5a71e3935e83322c238c960cf8d440005_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input"
    },
    {
      "cve": "CVE-2026-56853",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-08-13T22:14:53.561638+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:474cf8c7500c50dfd569180570f00d9649691a8621ce34f82957e53d2ad95a66_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:667964ca0a8379a75425a90e7f1a3c109804e91b6fbc38aa9ecc72d57949925b_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:9d1fac43e376171a8666d299e4d06f50e102695266e5a8bf424886dcb7e305eb_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:ae786598501725df58ae66ce52607fb8f0c325456537cf41e55cae33ccd4e370_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:0d78ff17f71f5f742aae872a9a15c48a5bf0baa328b85d627ae177bf2c88e3da_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:1a51f636af388a11694876bcea3acb73885479b1b7e02417b4c13c8fde93ab2a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:7aa9a1a8a24b2861178d0f64ae4593cc1668562f9844f405e05cf47e94229a09_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:e9e0770bdb543dd42aa3c3aa5014cbf19d913da8f58e4d69eb58132421137ac6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:5540377f87365b5501ec4bac45334b0fc1658635c3347505fa52fe11e6f9098f_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b2c2987a6048c3e65be46209059f78067a7d0ebdf8d4481c607a8f322696e903_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:e3ab5b8e9d1b5306ee3e8bb46d54b5b7579653117db71f6f80bf4a7f0abbc62f_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:fb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:068743012df5f7f0ce25e785630555ce532d50ec32a17a66e51108a5096ae38a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:0f2106026942ca06110301ece4f911b7ea0c50461cde3a5c8710e529c7f7c4c6_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dae49f4e857b84f9bad0c3a477c43834cbea6118a719c793b00524ab19b7dc0a_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:eb5f0c7e8418bde2c4a059b8f7600f478cfbd3ff46f8f8fc407b50e8dc88691b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:0550d8ac592cf476506a992d0d3f7beb4e6aa4414f259cda47a80e4749311537_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b19bfad20ee4fb3de2075251b3eb2c1ea6a76b68edac2c3bbd4523c0aa0346a8_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:e8e427cc5103d412b4677c3aa93912cb82a5b5db8be8d21992f4341bf404f75b_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ebe846db7b0733c85850182d709103faf3725b27b2daa3b9d08b23212dbd5cca_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:f838339b4bd024f76fead96f23892c7800ffdfb243538369bed23c4f64eef8e3_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:065492e0defff65abc0c2fb776b19506e65ff65924e39eaa4e2488e884376dea_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:0d0a2e283bcfc021884410130d3dba6b7b4edfc28223cf7a2e203c2b6b3e6a9b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:42309d715ad9d81fd87b5e20d0ae8f41c4ec1f05f71e3b55b610ac6533d75253_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4e81294ae472aa938a644e4672b264f5a71e3935e83322c238c960cf8d440005_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515827"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `net/http` component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the `ReadHeaderTimeout` is not correctly applied during this process. This oversight could allow a remote attacker to maintain open connections indefinitely, potentially leading to a Denial of Service (DoS) by exhausting server resources.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Important: Unencrypted HTTP/2 servers are susceptible to a denial of service due to improper handling of ReadHeaderTimeout during the client preface reading phase. This can lead to resource exhaustion and service unavailability in affected Red Hat products configured to support unencrypted HTTP/2.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:2fda4c6642fd343cf7bd0fe629e4d85ae95c5180b8f544c464980a7c7dde9e58_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:97a0788b5ac604ca74362198517f87499da2ec26dd449cf5fb7d6eddf28de9f6_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:ada851d78ec38f12688e6a64166767ddd1c960f6099604e0abf06d18ad74519a_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b307464aa7f189abb67b951542d74b1f89940412fd4d08ab89a9aac25de4fb38_arm64"
        ],
        "known_not_affected": [
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:474cf8c7500c50dfd569180570f00d9649691a8621ce34f82957e53d2ad95a66_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:667964ca0a8379a75425a90e7f1a3c109804e91b6fbc38aa9ecc72d57949925b_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:9d1fac43e376171a8666d299e4d06f50e102695266e5a8bf424886dcb7e305eb_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:ae786598501725df58ae66ce52607fb8f0c325456537cf41e55cae33ccd4e370_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:0d78ff17f71f5f742aae872a9a15c48a5bf0baa328b85d627ae177bf2c88e3da_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:1a51f636af388a11694876bcea3acb73885479b1b7e02417b4c13c8fde93ab2a_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:7aa9a1a8a24b2861178d0f64ae4593cc1668562f9844f405e05cf47e94229a09_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:e9e0770bdb543dd42aa3c3aa5014cbf19d913da8f58e4d69eb58132421137ac6_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:5540377f87365b5501ec4bac45334b0fc1658635c3347505fa52fe11e6f9098f_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b2c2987a6048c3e65be46209059f78067a7d0ebdf8d4481c607a8f322696e903_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:e3ab5b8e9d1b5306ee3e8bb46d54b5b7579653117db71f6f80bf4a7f0abbc62f_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:fb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:068743012df5f7f0ce25e785630555ce532d50ec32a17a66e51108a5096ae38a_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:0f2106026942ca06110301ece4f911b7ea0c50461cde3a5c8710e529c7f7c4c6_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dae49f4e857b84f9bad0c3a477c43834cbea6118a719c793b00524ab19b7dc0a_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:eb5f0c7e8418bde2c4a059b8f7600f478cfbd3ff46f8f8fc407b50e8dc88691b_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:0550d8ac592cf476506a992d0d3f7beb4e6aa4414f259cda47a80e4749311537_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b19bfad20ee4fb3de2075251b3eb2c1ea6a76b68edac2c3bbd4523c0aa0346a8_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:e8e427cc5103d412b4677c3aa93912cb82a5b5db8be8d21992f4341bf404f75b_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ebe846db7b0733c85850182d709103faf3725b27b2daa3b9d08b23212dbd5cca_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:f838339b4bd024f76fead96f23892c7800ffdfb243538369bed23c4f64eef8e3_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:065492e0defff65abc0c2fb776b19506e65ff65924e39eaa4e2488e884376dea_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:0d0a2e283bcfc021884410130d3dba6b7b4edfc28223cf7a2e203c2b6b3e6a9b_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:42309d715ad9d81fd87b5e20d0ae8f41c4ec1f05f71e3b55b610ac6533d75253_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4e81294ae472aa938a644e4672b264f5a71e3935e83322c238c960cf8d440005_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56853"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515827",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515827"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56853",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56853"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56853",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56853"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/795540",
          "url": "https://go.dev/cl/795540"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80205",
          "url": "https://go.dev/issue/80205"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6089",
          "url": "https://pkg.go.dev/vuln/GO-2026-6089"
        }
      ],
      "release_date": "2026-08-13T21:58:53.092000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-23T06:31:49+00:00",
          "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:2fda4c6642fd343cf7bd0fe629e4d85ae95c5180b8f544c464980a7c7dde9e58_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:97a0788b5ac604ca74362198517f87499da2ec26dd449cf5fb7d6eddf28de9f6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:ada851d78ec38f12688e6a64166767ddd1c960f6099604e0abf06d18ad74519a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b307464aa7f189abb67b951542d74b1f89940412fd4d08ab89a9aac25de4fb38_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:70593"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:2fda4c6642fd343cf7bd0fe629e4d85ae95c5180b8f544c464980a7c7dde9e58_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:97a0788b5ac604ca74362198517f87499da2ec26dd449cf5fb7d6eddf28de9f6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:ada851d78ec38f12688e6a64166767ddd1c960f6099604e0abf06d18ad74519a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b307464aa7f189abb67b951542d74b1f89940412fd4d08ab89a9aac25de4fb38_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:474cf8c7500c50dfd569180570f00d9649691a8621ce34f82957e53d2ad95a66_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:667964ca0a8379a75425a90e7f1a3c109804e91b6fbc38aa9ecc72d57949925b_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:9d1fac43e376171a8666d299e4d06f50e102695266e5a8bf424886dcb7e305eb_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:ae786598501725df58ae66ce52607fb8f0c325456537cf41e55cae33ccd4e370_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:0d78ff17f71f5f742aae872a9a15c48a5bf0baa328b85d627ae177bf2c88e3da_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:1a51f636af388a11694876bcea3acb73885479b1b7e02417b4c13c8fde93ab2a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:7aa9a1a8a24b2861178d0f64ae4593cc1668562f9844f405e05cf47e94229a09_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:e9e0770bdb543dd42aa3c3aa5014cbf19d913da8f58e4d69eb58132421137ac6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:5540377f87365b5501ec4bac45334b0fc1658635c3347505fa52fe11e6f9098f_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b2c2987a6048c3e65be46209059f78067a7d0ebdf8d4481c607a8f322696e903_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:e3ab5b8e9d1b5306ee3e8bb46d54b5b7579653117db71f6f80bf4a7f0abbc62f_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:fb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:068743012df5f7f0ce25e785630555ce532d50ec32a17a66e51108a5096ae38a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:0f2106026942ca06110301ece4f911b7ea0c50461cde3a5c8710e529c7f7c4c6_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dae49f4e857b84f9bad0c3a477c43834cbea6118a719c793b00524ab19b7dc0a_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:eb5f0c7e8418bde2c4a059b8f7600f478cfbd3ff46f8f8fc407b50e8dc88691b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:0550d8ac592cf476506a992d0d3f7beb4e6aa4414f259cda47a80e4749311537_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b19bfad20ee4fb3de2075251b3eb2c1ea6a76b68edac2c3bbd4523c0aa0346a8_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:e8e427cc5103d412b4677c3aa93912cb82a5b5db8be8d21992f4341bf404f75b_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ebe846db7b0733c85850182d709103faf3725b27b2daa3b9d08b23212dbd5cca_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:f838339b4bd024f76fead96f23892c7800ffdfb243538369bed23c4f64eef8e3_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:065492e0defff65abc0c2fb776b19506e65ff65924e39eaa4e2488e884376dea_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:0d0a2e283bcfc021884410130d3dba6b7b4edfc28223cf7a2e203c2b6b3e6a9b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:42309d715ad9d81fd87b5e20d0ae8f41c4ec1f05f71e3b55b610ac6533d75253_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4e81294ae472aa938a644e4672b264f5a71e3935e83322c238c960cf8d440005_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service"
    },
    {
      "cve": "CVE-2026-56859",
      "cwe": {
        "id": "CWE-776",
        "name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
      },
      "discovery_date": "2026-08-13T22:16:52.493058+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:474cf8c7500c50dfd569180570f00d9649691a8621ce34f82957e53d2ad95a66_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:667964ca0a8379a75425a90e7f1a3c109804e91b6fbc38aa9ecc72d57949925b_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:9d1fac43e376171a8666d299e4d06f50e102695266e5a8bf424886dcb7e305eb_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:ae786598501725df58ae66ce52607fb8f0c325456537cf41e55cae33ccd4e370_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:0d78ff17f71f5f742aae872a9a15c48a5bf0baa328b85d627ae177bf2c88e3da_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:1a51f636af388a11694876bcea3acb73885479b1b7e02417b4c13c8fde93ab2a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:7aa9a1a8a24b2861178d0f64ae4593cc1668562f9844f405e05cf47e94229a09_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:e9e0770bdb543dd42aa3c3aa5014cbf19d913da8f58e4d69eb58132421137ac6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:5540377f87365b5501ec4bac45334b0fc1658635c3347505fa52fe11e6f9098f_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b2c2987a6048c3e65be46209059f78067a7d0ebdf8d4481c607a8f322696e903_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:e3ab5b8e9d1b5306ee3e8bb46d54b5b7579653117db71f6f80bf4a7f0abbc62f_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:fb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:068743012df5f7f0ce25e785630555ce532d50ec32a17a66e51108a5096ae38a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:0f2106026942ca06110301ece4f911b7ea0c50461cde3a5c8710e529c7f7c4c6_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dae49f4e857b84f9bad0c3a477c43834cbea6118a719c793b00524ab19b7dc0a_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:eb5f0c7e8418bde2c4a059b8f7600f478cfbd3ff46f8f8fc407b50e8dc88691b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:0550d8ac592cf476506a992d0d3f7beb4e6aa4414f259cda47a80e4749311537_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b19bfad20ee4fb3de2075251b3eb2c1ea6a76b68edac2c3bbd4523c0aa0346a8_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:e8e427cc5103d412b4677c3aa93912cb82a5b5db8be8d21992f4341bf404f75b_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ebe846db7b0733c85850182d709103faf3725b27b2daa3b9d08b23212dbd5cca_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:f838339b4bd024f76fead96f23892c7800ffdfb243538369bed23c4f64eef8e3_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:065492e0defff65abc0c2fb776b19506e65ff65924e39eaa4e2488e884376dea_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:0d0a2e283bcfc021884410130d3dba6b7b4edfc28223cf7a2e203c2b6b3e6a9b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:42309d715ad9d81fd87b5e20d0ae8f41c4ec1f05f71e3b55b610ac6533d75253_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4e81294ae472aa938a644e4672b264f5a71e3935e83322c238c960cf8d440005_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515840"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `encoding/xml` package of Go. The `DecodeElement` function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service (DoS) for the affected application.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "An Important denial of service flaw affects applications utilizing the Go `encoding/xml` package. This vulnerability arises from an issue in XML decoding where a recursion depth counter fails to reset, potentially leading to stack exhaustion when processing malicious XML input.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:2fda4c6642fd343cf7bd0fe629e4d85ae95c5180b8f544c464980a7c7dde9e58_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:97a0788b5ac604ca74362198517f87499da2ec26dd449cf5fb7d6eddf28de9f6_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:ada851d78ec38f12688e6a64166767ddd1c960f6099604e0abf06d18ad74519a_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b307464aa7f189abb67b951542d74b1f89940412fd4d08ab89a9aac25de4fb38_arm64"
        ],
        "known_not_affected": [
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:474cf8c7500c50dfd569180570f00d9649691a8621ce34f82957e53d2ad95a66_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:667964ca0a8379a75425a90e7f1a3c109804e91b6fbc38aa9ecc72d57949925b_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:9d1fac43e376171a8666d299e4d06f50e102695266e5a8bf424886dcb7e305eb_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:ae786598501725df58ae66ce52607fb8f0c325456537cf41e55cae33ccd4e370_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:0d78ff17f71f5f742aae872a9a15c48a5bf0baa328b85d627ae177bf2c88e3da_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:1a51f636af388a11694876bcea3acb73885479b1b7e02417b4c13c8fde93ab2a_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:7aa9a1a8a24b2861178d0f64ae4593cc1668562f9844f405e05cf47e94229a09_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:e9e0770bdb543dd42aa3c3aa5014cbf19d913da8f58e4d69eb58132421137ac6_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:5540377f87365b5501ec4bac45334b0fc1658635c3347505fa52fe11e6f9098f_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b2c2987a6048c3e65be46209059f78067a7d0ebdf8d4481c607a8f322696e903_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:e3ab5b8e9d1b5306ee3e8bb46d54b5b7579653117db71f6f80bf4a7f0abbc62f_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:fb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:068743012df5f7f0ce25e785630555ce532d50ec32a17a66e51108a5096ae38a_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:0f2106026942ca06110301ece4f911b7ea0c50461cde3a5c8710e529c7f7c4c6_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dae49f4e857b84f9bad0c3a477c43834cbea6118a719c793b00524ab19b7dc0a_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:eb5f0c7e8418bde2c4a059b8f7600f478cfbd3ff46f8f8fc407b50e8dc88691b_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:0550d8ac592cf476506a992d0d3f7beb4e6aa4414f259cda47a80e4749311537_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b19bfad20ee4fb3de2075251b3eb2c1ea6a76b68edac2c3bbd4523c0aa0346a8_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:e8e427cc5103d412b4677c3aa93912cb82a5b5db8be8d21992f4341bf404f75b_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ebe846db7b0733c85850182d709103faf3725b27b2daa3b9d08b23212dbd5cca_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:f838339b4bd024f76fead96f23892c7800ffdfb243538369bed23c4f64eef8e3_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:065492e0defff65abc0c2fb776b19506e65ff65924e39eaa4e2488e884376dea_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:0d0a2e283bcfc021884410130d3dba6b7b4edfc28223cf7a2e203c2b6b3e6a9b_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:42309d715ad9d81fd87b5e20d0ae8f41c4ec1f05f71e3b55b610ac6533d75253_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4e81294ae472aa938a644e4672b264f5a71e3935e83322c238c960cf8d440005_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56859"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515840",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515840"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56859",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56859"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56859",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56859"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/803320",
          "url": "https://go.dev/cl/803320"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80481",
          "url": "https://go.dev/issue/80481"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6088",
          "url": "https://pkg.go.dev/vuln/GO-2026-6088"
        }
      ],
      "release_date": "2026-08-13T21:58:52.959000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-23T06:31:49+00:00",
          "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:2fda4c6642fd343cf7bd0fe629e4d85ae95c5180b8f544c464980a7c7dde9e58_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:97a0788b5ac604ca74362198517f87499da2ec26dd449cf5fb7d6eddf28de9f6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:ada851d78ec38f12688e6a64166767ddd1c960f6099604e0abf06d18ad74519a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b307464aa7f189abb67b951542d74b1f89940412fd4d08ab89a9aac25de4fb38_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:70593"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:2fda4c6642fd343cf7bd0fe629e4d85ae95c5180b8f544c464980a7c7dde9e58_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:97a0788b5ac604ca74362198517f87499da2ec26dd449cf5fb7d6eddf28de9f6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:ada851d78ec38f12688e6a64166767ddd1c960f6099604e0abf06d18ad74519a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b307464aa7f189abb67b951542d74b1f89940412fd4d08ab89a9aac25de4fb38_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:474cf8c7500c50dfd569180570f00d9649691a8621ce34f82957e53d2ad95a66_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:667964ca0a8379a75425a90e7f1a3c109804e91b6fbc38aa9ecc72d57949925b_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:9d1fac43e376171a8666d299e4d06f50e102695266e5a8bf424886dcb7e305eb_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:ae786598501725df58ae66ce52607fb8f0c325456537cf41e55cae33ccd4e370_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:0d78ff17f71f5f742aae872a9a15c48a5bf0baa328b85d627ae177bf2c88e3da_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:1a51f636af388a11694876bcea3acb73885479b1b7e02417b4c13c8fde93ab2a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:7aa9a1a8a24b2861178d0f64ae4593cc1668562f9844f405e05cf47e94229a09_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:e9e0770bdb543dd42aa3c3aa5014cbf19d913da8f58e4d69eb58132421137ac6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:5540377f87365b5501ec4bac45334b0fc1658635c3347505fa52fe11e6f9098f_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b2c2987a6048c3e65be46209059f78067a7d0ebdf8d4481c607a8f322696e903_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:e3ab5b8e9d1b5306ee3e8bb46d54b5b7579653117db71f6f80bf4a7f0abbc62f_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:fb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:068743012df5f7f0ce25e785630555ce532d50ec32a17a66e51108a5096ae38a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:0f2106026942ca06110301ece4f911b7ea0c50461cde3a5c8710e529c7f7c4c6_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dae49f4e857b84f9bad0c3a477c43834cbea6118a719c793b00524ab19b7dc0a_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:eb5f0c7e8418bde2c4a059b8f7600f478cfbd3ff46f8f8fc407b50e8dc88691b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:0550d8ac592cf476506a992d0d3f7beb4e6aa4414f259cda47a80e4749311537_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b19bfad20ee4fb3de2075251b3eb2c1ea6a76b68edac2c3bbd4523c0aa0346a8_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:e8e427cc5103d412b4677c3aa93912cb82a5b5db8be8d21992f4341bf404f75b_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ebe846db7b0733c85850182d709103faf3725b27b2daa3b9d08b23212dbd5cca_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:f838339b4bd024f76fead96f23892c7800ffdfb243538369bed23c4f64eef8e3_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:065492e0defff65abc0c2fb776b19506e65ff65924e39eaa4e2488e884376dea_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:0d0a2e283bcfc021884410130d3dba6b7b4edfc28223cf7a2e203c2b6b3e6a9b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:42309d715ad9d81fd87b5e20d0ae8f41c4ec1f05f71e3b55b610ac6533d75253_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4e81294ae472aa938a644e4672b264f5a71e3935e83322c238c960cf8d440005_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:2fda4c6642fd343cf7bd0fe629e4d85ae95c5180b8f544c464980a7c7dde9e58_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:97a0788b5ac604ca74362198517f87499da2ec26dd449cf5fb7d6eddf28de9f6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:ada851d78ec38f12688e6a64166767ddd1c960f6099604e0abf06d18ad74519a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b307464aa7f189abb67b951542d74b1f89940412fd4d08ab89a9aac25de4fb38_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:474cf8c7500c50dfd569180570f00d9649691a8621ce34f82957e53d2ad95a66_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:667964ca0a8379a75425a90e7f1a3c109804e91b6fbc38aa9ecc72d57949925b_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:9d1fac43e376171a8666d299e4d06f50e102695266e5a8bf424886dcb7e305eb_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:ae786598501725df58ae66ce52607fb8f0c325456537cf41e55cae33ccd4e370_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:0d78ff17f71f5f742aae872a9a15c48a5bf0baa328b85d627ae177bf2c88e3da_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:1a51f636af388a11694876bcea3acb73885479b1b7e02417b4c13c8fde93ab2a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:7aa9a1a8a24b2861178d0f64ae4593cc1668562f9844f405e05cf47e94229a09_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:e9e0770bdb543dd42aa3c3aa5014cbf19d913da8f58e4d69eb58132421137ac6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:5540377f87365b5501ec4bac45334b0fc1658635c3347505fa52fe11e6f9098f_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b2c2987a6048c3e65be46209059f78067a7d0ebdf8d4481c607a8f322696e903_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:e3ab5b8e9d1b5306ee3e8bb46d54b5b7579653117db71f6f80bf4a7f0abbc62f_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:fb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:068743012df5f7f0ce25e785630555ce532d50ec32a17a66e51108a5096ae38a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:0f2106026942ca06110301ece4f911b7ea0c50461cde3a5c8710e529c7f7c4c6_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dae49f4e857b84f9bad0c3a477c43834cbea6118a719c793b00524ab19b7dc0a_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:eb5f0c7e8418bde2c4a059b8f7600f478cfbd3ff46f8f8fc407b50e8dc88691b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:0550d8ac592cf476506a992d0d3f7beb4e6aa4414f259cda47a80e4749311537_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b19bfad20ee4fb3de2075251b3eb2c1ea6a76b68edac2c3bbd4523c0aa0346a8_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:e8e427cc5103d412b4677c3aa93912cb82a5b5db8be8d21992f4341bf404f75b_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ebe846db7b0733c85850182d709103faf3725b27b2daa3b9d08b23212dbd5cca_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:f838339b4bd024f76fead96f23892c7800ffdfb243538369bed23c4f64eef8e3_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:065492e0defff65abc0c2fb776b19506e65ff65924e39eaa4e2488e884376dea_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:0d0a2e283bcfc021884410130d3dba6b7b4edfc28223cf7a2e203c2b6b3e6a9b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:42309d715ad9d81fd87b5e20d0ae8f41c4ec1f05f71e3b55b610ac6533d75253_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4e81294ae472aa938a644e4672b264f5a71e3935e83322c238c960cf8d440005_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue"
    },
    {
      "cve": "CVE-2026-56860",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-08-13T22:13:18.319384+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:474cf8c7500c50dfd569180570f00d9649691a8621ce34f82957e53d2ad95a66_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:667964ca0a8379a75425a90e7f1a3c109804e91b6fbc38aa9ecc72d57949925b_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:9d1fac43e376171a8666d299e4d06f50e102695266e5a8bf424886dcb7e305eb_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:ae786598501725df58ae66ce52607fb8f0c325456537cf41e55cae33ccd4e370_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:0d78ff17f71f5f742aae872a9a15c48a5bf0baa328b85d627ae177bf2c88e3da_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:1a51f636af388a11694876bcea3acb73885479b1b7e02417b4c13c8fde93ab2a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:7aa9a1a8a24b2861178d0f64ae4593cc1668562f9844f405e05cf47e94229a09_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:e9e0770bdb543dd42aa3c3aa5014cbf19d913da8f58e4d69eb58132421137ac6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:5540377f87365b5501ec4bac45334b0fc1658635c3347505fa52fe11e6f9098f_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b2c2987a6048c3e65be46209059f78067a7d0ebdf8d4481c607a8f322696e903_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:e3ab5b8e9d1b5306ee3e8bb46d54b5b7579653117db71f6f80bf4a7f0abbc62f_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:fb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:068743012df5f7f0ce25e785630555ce532d50ec32a17a66e51108a5096ae38a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:0f2106026942ca06110301ece4f911b7ea0c50461cde3a5c8710e529c7f7c4c6_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dae49f4e857b84f9bad0c3a477c43834cbea6118a719c793b00524ab19b7dc0a_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:eb5f0c7e8418bde2c4a059b8f7600f478cfbd3ff46f8f8fc407b50e8dc88691b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:0550d8ac592cf476506a992d0d3f7beb4e6aa4414f259cda47a80e4749311537_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b19bfad20ee4fb3de2075251b3eb2c1ea6a76b68edac2c3bbd4523c0aa0346a8_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:e8e427cc5103d412b4677c3aa93912cb82a5b5db8be8d21992f4341bf404f75b_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ebe846db7b0733c85850182d709103faf3725b27b2daa3b9d08b23212dbd5cca_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:f838339b4bd024f76fead96f23892c7800ffdfb243538369bed23c4f64eef8e3_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:065492e0defff65abc0c2fb776b19506e65ff65924e39eaa4e2488e884376dea_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:0d0a2e283bcfc021884410130d3dba6b7b4edfc28223cf7a2e203c2b6b3e6a9b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:42309d715ad9d81fd87b5e20d0ae8f41c4ec1f05f71e3b55b610ac6533d75253_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4e81294ae472aa938a644e4672b264f5a71e3935e83322c238c960cf8d440005_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515820"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in `net/url`, a component of `golang`. This vulnerability arises when resolving relative paths that contain numerous parent directory (\u0027..\u0027) segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory allocation. This can result in a Denial of Service (DoS) due to resource exhaustion.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service flaw in the Go `net/url` package. Applications built with Go that process untrusted URLs containing parent directory segments (\u0027..\u0027) may be vulnerable to excessive resource consumption due to quadratic time complexity in path resolution. This can lead to a denial of service, impacting the availability of affected services.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:2fda4c6642fd343cf7bd0fe629e4d85ae95c5180b8f544c464980a7c7dde9e58_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:97a0788b5ac604ca74362198517f87499da2ec26dd449cf5fb7d6eddf28de9f6_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:ada851d78ec38f12688e6a64166767ddd1c960f6099604e0abf06d18ad74519a_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b307464aa7f189abb67b951542d74b1f89940412fd4d08ab89a9aac25de4fb38_arm64"
        ],
        "known_not_affected": [
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:474cf8c7500c50dfd569180570f00d9649691a8621ce34f82957e53d2ad95a66_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:667964ca0a8379a75425a90e7f1a3c109804e91b6fbc38aa9ecc72d57949925b_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:9d1fac43e376171a8666d299e4d06f50e102695266e5a8bf424886dcb7e305eb_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:ae786598501725df58ae66ce52607fb8f0c325456537cf41e55cae33ccd4e370_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:0d78ff17f71f5f742aae872a9a15c48a5bf0baa328b85d627ae177bf2c88e3da_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:1a51f636af388a11694876bcea3acb73885479b1b7e02417b4c13c8fde93ab2a_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:7aa9a1a8a24b2861178d0f64ae4593cc1668562f9844f405e05cf47e94229a09_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:e9e0770bdb543dd42aa3c3aa5014cbf19d913da8f58e4d69eb58132421137ac6_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:5540377f87365b5501ec4bac45334b0fc1658635c3347505fa52fe11e6f9098f_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b2c2987a6048c3e65be46209059f78067a7d0ebdf8d4481c607a8f322696e903_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:e3ab5b8e9d1b5306ee3e8bb46d54b5b7579653117db71f6f80bf4a7f0abbc62f_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:fb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:068743012df5f7f0ce25e785630555ce532d50ec32a17a66e51108a5096ae38a_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:0f2106026942ca06110301ece4f911b7ea0c50461cde3a5c8710e529c7f7c4c6_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dae49f4e857b84f9bad0c3a477c43834cbea6118a719c793b00524ab19b7dc0a_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:eb5f0c7e8418bde2c4a059b8f7600f478cfbd3ff46f8f8fc407b50e8dc88691b_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:0550d8ac592cf476506a992d0d3f7beb4e6aa4414f259cda47a80e4749311537_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b19bfad20ee4fb3de2075251b3eb2c1ea6a76b68edac2c3bbd4523c0aa0346a8_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:e8e427cc5103d412b4677c3aa93912cb82a5b5db8be8d21992f4341bf404f75b_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ebe846db7b0733c85850182d709103faf3725b27b2daa3b9d08b23212dbd5cca_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:f838339b4bd024f76fead96f23892c7800ffdfb243538369bed23c4f64eef8e3_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:065492e0defff65abc0c2fb776b19506e65ff65924e39eaa4e2488e884376dea_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:0d0a2e283bcfc021884410130d3dba6b7b4edfc28223cf7a2e203c2b6b3e6a9b_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:42309d715ad9d81fd87b5e20d0ae8f41c4ec1f05f71e3b55b610ac6533d75253_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4e81294ae472aa938a644e4672b264f5a71e3935e83322c238c960cf8d440005_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56860"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515820",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515820"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56860",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56860"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56860",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56860"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/803681",
          "url": "https://go.dev/cl/803681"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80494",
          "url": "https://go.dev/issue/80494"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6218",
          "url": "https://pkg.go.dev/vuln/GO-2026-6218"
        }
      ],
      "release_date": "2026-08-13T21:58:53.731000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-23T06:31:49+00:00",
          "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:2fda4c6642fd343cf7bd0fe629e4d85ae95c5180b8f544c464980a7c7dde9e58_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:97a0788b5ac604ca74362198517f87499da2ec26dd449cf5fb7d6eddf28de9f6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:ada851d78ec38f12688e6a64166767ddd1c960f6099604e0abf06d18ad74519a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b307464aa7f189abb67b951542d74b1f89940412fd4d08ab89a9aac25de4fb38_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:70593"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:2fda4c6642fd343cf7bd0fe629e4d85ae95c5180b8f544c464980a7c7dde9e58_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:97a0788b5ac604ca74362198517f87499da2ec26dd449cf5fb7d6eddf28de9f6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:ada851d78ec38f12688e6a64166767ddd1c960f6099604e0abf06d18ad74519a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b307464aa7f189abb67b951542d74b1f89940412fd4d08ab89a9aac25de4fb38_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:474cf8c7500c50dfd569180570f00d9649691a8621ce34f82957e53d2ad95a66_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:667964ca0a8379a75425a90e7f1a3c109804e91b6fbc38aa9ecc72d57949925b_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:9d1fac43e376171a8666d299e4d06f50e102695266e5a8bf424886dcb7e305eb_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:ae786598501725df58ae66ce52607fb8f0c325456537cf41e55cae33ccd4e370_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:0d78ff17f71f5f742aae872a9a15c48a5bf0baa328b85d627ae177bf2c88e3da_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:1a51f636af388a11694876bcea3acb73885479b1b7e02417b4c13c8fde93ab2a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:7aa9a1a8a24b2861178d0f64ae4593cc1668562f9844f405e05cf47e94229a09_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:e9e0770bdb543dd42aa3c3aa5014cbf19d913da8f58e4d69eb58132421137ac6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:5540377f87365b5501ec4bac45334b0fc1658635c3347505fa52fe11e6f9098f_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b2c2987a6048c3e65be46209059f78067a7d0ebdf8d4481c607a8f322696e903_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:e3ab5b8e9d1b5306ee3e8bb46d54b5b7579653117db71f6f80bf4a7f0abbc62f_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:fb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:068743012df5f7f0ce25e785630555ce532d50ec32a17a66e51108a5096ae38a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:0f2106026942ca06110301ece4f911b7ea0c50461cde3a5c8710e529c7f7c4c6_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dae49f4e857b84f9bad0c3a477c43834cbea6118a719c793b00524ab19b7dc0a_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:eb5f0c7e8418bde2c4a059b8f7600f478cfbd3ff46f8f8fc407b50e8dc88691b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:0550d8ac592cf476506a992d0d3f7beb4e6aa4414f259cda47a80e4749311537_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b19bfad20ee4fb3de2075251b3eb2c1ea6a76b68edac2c3bbd4523c0aa0346a8_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:e8e427cc5103d412b4677c3aa93912cb82a5b5db8be8d21992f4341bf404f75b_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ebe846db7b0733c85850182d709103faf3725b27b2daa3b9d08b23212dbd5cca_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:f838339b4bd024f76fead96f23892c7800ffdfb243538369bed23c4f64eef8e3_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:065492e0defff65abc0c2fb776b19506e65ff65924e39eaa4e2488e884376dea_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:0d0a2e283bcfc021884410130d3dba6b7b4edfc28223cf7a2e203c2b6b3e6a9b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:42309d715ad9d81fd87b5e20d0ae8f41c4ec1f05f71e3b55b610ac6533d75253_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4e81294ae472aa938a644e4672b264f5a71e3935e83322c238c960cf8d440005_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution"
    },
    {
      "cve": "CVE-2026-56862",
      "cwe": {
        "id": "CWE-1050",
        "name": "Excessive Platform Resource Consumption within a Loop"
      },
      "discovery_date": "2026-08-13T22:16:41.928450+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:474cf8c7500c50dfd569180570f00d9649691a8621ce34f82957e53d2ad95a66_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:667964ca0a8379a75425a90e7f1a3c109804e91b6fbc38aa9ecc72d57949925b_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:9d1fac43e376171a8666d299e4d06f50e102695266e5a8bf424886dcb7e305eb_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:ae786598501725df58ae66ce52607fb8f0c325456537cf41e55cae33ccd4e370_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:0d78ff17f71f5f742aae872a9a15c48a5bf0baa328b85d627ae177bf2c88e3da_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:1a51f636af388a11694876bcea3acb73885479b1b7e02417b4c13c8fde93ab2a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:7aa9a1a8a24b2861178d0f64ae4593cc1668562f9844f405e05cf47e94229a09_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:e9e0770bdb543dd42aa3c3aa5014cbf19d913da8f58e4d69eb58132421137ac6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:5540377f87365b5501ec4bac45334b0fc1658635c3347505fa52fe11e6f9098f_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b2c2987a6048c3e65be46209059f78067a7d0ebdf8d4481c607a8f322696e903_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:e3ab5b8e9d1b5306ee3e8bb46d54b5b7579653117db71f6f80bf4a7f0abbc62f_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:fb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:068743012df5f7f0ce25e785630555ce532d50ec32a17a66e51108a5096ae38a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:0f2106026942ca06110301ece4f911b7ea0c50461cde3a5c8710e529c7f7c4c6_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dae49f4e857b84f9bad0c3a477c43834cbea6118a719c793b00524ab19b7dc0a_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:eb5f0c7e8418bde2c4a059b8f7600f478cfbd3ff46f8f8fc407b50e8dc88691b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:0550d8ac592cf476506a992d0d3f7beb4e6aa4414f259cda47a80e4749311537_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b19bfad20ee4fb3de2075251b3eb2c1ea6a76b68edac2c3bbd4523c0aa0346a8_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:e8e427cc5103d412b4677c3aa93912cb82a5b5db8be8d21992f4341bf404f75b_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ebe846db7b0733c85850182d709103faf3725b27b2daa3b9d08b23212dbd5cca_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:f838339b4bd024f76fead96f23892c7800ffdfb243538369bed23c4f64eef8e3_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:065492e0defff65abc0c2fb776b19506e65ff65924e39eaa4e2488e884376dea_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:0d0a2e283bcfc021884410130d3dba6b7b4edfc28223cf7a2e203c2b6b3e6a9b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:42309d715ad9d81fd87b5e20d0ae8f41c4ec1f05f71e3b55b610ac6533d75253_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4e81294ae472aa938a644e4672b264f5a71e3935e83322c238c960cf8d440005_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515839"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `crypto/tls` package, part of `golang`. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service (DoS) condition.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in the `golang` `crypto/tls` package. A remote, unauthenticated attacker can exploit this flaw by continuously sending `KeyUpdate` messages during a TLS handshake, forcing the server to perform indefinite key derivation operations. This resource exhaustion can lead to a denial of service for applications and services in Red Hat products that use the affected `crypto/tls` library and are exposed to untrusted network clients.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:2fda4c6642fd343cf7bd0fe629e4d85ae95c5180b8f544c464980a7c7dde9e58_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:97a0788b5ac604ca74362198517f87499da2ec26dd449cf5fb7d6eddf28de9f6_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:ada851d78ec38f12688e6a64166767ddd1c960f6099604e0abf06d18ad74519a_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b307464aa7f189abb67b951542d74b1f89940412fd4d08ab89a9aac25de4fb38_arm64"
        ],
        "known_not_affected": [
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:474cf8c7500c50dfd569180570f00d9649691a8621ce34f82957e53d2ad95a66_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:667964ca0a8379a75425a90e7f1a3c109804e91b6fbc38aa9ecc72d57949925b_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:9d1fac43e376171a8666d299e4d06f50e102695266e5a8bf424886dcb7e305eb_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:ae786598501725df58ae66ce52607fb8f0c325456537cf41e55cae33ccd4e370_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:0d78ff17f71f5f742aae872a9a15c48a5bf0baa328b85d627ae177bf2c88e3da_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:1a51f636af388a11694876bcea3acb73885479b1b7e02417b4c13c8fde93ab2a_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:7aa9a1a8a24b2861178d0f64ae4593cc1668562f9844f405e05cf47e94229a09_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:e9e0770bdb543dd42aa3c3aa5014cbf19d913da8f58e4d69eb58132421137ac6_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:5540377f87365b5501ec4bac45334b0fc1658635c3347505fa52fe11e6f9098f_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b2c2987a6048c3e65be46209059f78067a7d0ebdf8d4481c607a8f322696e903_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:e3ab5b8e9d1b5306ee3e8bb46d54b5b7579653117db71f6f80bf4a7f0abbc62f_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:fb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:068743012df5f7f0ce25e785630555ce532d50ec32a17a66e51108a5096ae38a_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:0f2106026942ca06110301ece4f911b7ea0c50461cde3a5c8710e529c7f7c4c6_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dae49f4e857b84f9bad0c3a477c43834cbea6118a719c793b00524ab19b7dc0a_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:eb5f0c7e8418bde2c4a059b8f7600f478cfbd3ff46f8f8fc407b50e8dc88691b_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:0550d8ac592cf476506a992d0d3f7beb4e6aa4414f259cda47a80e4749311537_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b19bfad20ee4fb3de2075251b3eb2c1ea6a76b68edac2c3bbd4523c0aa0346a8_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:e8e427cc5103d412b4677c3aa93912cb82a5b5db8be8d21992f4341bf404f75b_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ebe846db7b0733c85850182d709103faf3725b27b2daa3b9d08b23212dbd5cca_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:f838339b4bd024f76fead96f23892c7800ffdfb243538369bed23c4f64eef8e3_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:065492e0defff65abc0c2fb776b19506e65ff65924e39eaa4e2488e884376dea_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:0d0a2e283bcfc021884410130d3dba6b7b4edfc28223cf7a2e203c2b6b3e6a9b_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:42309d715ad9d81fd87b5e20d0ae8f41c4ec1f05f71e3b55b610ac6533d75253_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4e81294ae472aa938a644e4672b264f5a71e3935e83322c238c960cf8d440005_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56862"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515839",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515839"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56862",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56862"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56862",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56862"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/804261",
          "url": "https://go.dev/cl/804261"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80528",
          "url": "https://go.dev/issue/80528"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6090",
          "url": "https://pkg.go.dev/vuln/GO-2026-6090"
        }
      ],
      "release_date": "2026-08-13T21:58:53.216000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-23T06:31:49+00:00",
          "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:2fda4c6642fd343cf7bd0fe629e4d85ae95c5180b8f544c464980a7c7dde9e58_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:97a0788b5ac604ca74362198517f87499da2ec26dd449cf5fb7d6eddf28de9f6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:ada851d78ec38f12688e6a64166767ddd1c960f6099604e0abf06d18ad74519a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b307464aa7f189abb67b951542d74b1f89940412fd4d08ab89a9aac25de4fb38_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:70593"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:2fda4c6642fd343cf7bd0fe629e4d85ae95c5180b8f544c464980a7c7dde9e58_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:97a0788b5ac604ca74362198517f87499da2ec26dd449cf5fb7d6eddf28de9f6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:ada851d78ec38f12688e6a64166767ddd1c960f6099604e0abf06d18ad74519a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b307464aa7f189abb67b951542d74b1f89940412fd4d08ab89a9aac25de4fb38_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:474cf8c7500c50dfd569180570f00d9649691a8621ce34f82957e53d2ad95a66_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:667964ca0a8379a75425a90e7f1a3c109804e91b6fbc38aa9ecc72d57949925b_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:9d1fac43e376171a8666d299e4d06f50e102695266e5a8bf424886dcb7e305eb_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:ae786598501725df58ae66ce52607fb8f0c325456537cf41e55cae33ccd4e370_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:0d78ff17f71f5f742aae872a9a15c48a5bf0baa328b85d627ae177bf2c88e3da_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:1a51f636af388a11694876bcea3acb73885479b1b7e02417b4c13c8fde93ab2a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:7aa9a1a8a24b2861178d0f64ae4593cc1668562f9844f405e05cf47e94229a09_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:e9e0770bdb543dd42aa3c3aa5014cbf19d913da8f58e4d69eb58132421137ac6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:5540377f87365b5501ec4bac45334b0fc1658635c3347505fa52fe11e6f9098f_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b2c2987a6048c3e65be46209059f78067a7d0ebdf8d4481c607a8f322696e903_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:e3ab5b8e9d1b5306ee3e8bb46d54b5b7579653117db71f6f80bf4a7f0abbc62f_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:fb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:068743012df5f7f0ce25e785630555ce532d50ec32a17a66e51108a5096ae38a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:0f2106026942ca06110301ece4f911b7ea0c50461cde3a5c8710e529c7f7c4c6_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dae49f4e857b84f9bad0c3a477c43834cbea6118a719c793b00524ab19b7dc0a_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:eb5f0c7e8418bde2c4a059b8f7600f478cfbd3ff46f8f8fc407b50e8dc88691b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:0550d8ac592cf476506a992d0d3f7beb4e6aa4414f259cda47a80e4749311537_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b19bfad20ee4fb3de2075251b3eb2c1ea6a76b68edac2c3bbd4523c0aa0346a8_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:e8e427cc5103d412b4677c3aa93912cb82a5b5db8be8d21992f4341bf404f75b_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ebe846db7b0733c85850182d709103faf3725b27b2daa3b9d08b23212dbd5cca_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:f838339b4bd024f76fead96f23892c7800ffdfb243538369bed23c4f64eef8e3_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:065492e0defff65abc0c2fb776b19506e65ff65924e39eaa4e2488e884376dea_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:0d0a2e283bcfc021884410130d3dba6b7b4edfc28223cf7a2e203c2b6b3e6a9b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:42309d715ad9d81fd87b5e20d0ae8f41c4ec1f05f71e3b55b610ac6533d75253_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4e81294ae472aa938a644e4672b264f5a71e3935e83322c238c960cf8d440005_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages"
    },
    {
      "cve": "CVE-2026-65819",
      "cwe": {
        "id": "CWE-805",
        "name": "Buffer Access with Incorrect Length Value"
      },
      "discovery_date": "2026-08-07T19:41:10.203732+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:474cf8c7500c50dfd569180570f00d9649691a8621ce34f82957e53d2ad95a66_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:667964ca0a8379a75425a90e7f1a3c109804e91b6fbc38aa9ecc72d57949925b_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:9d1fac43e376171a8666d299e4d06f50e102695266e5a8bf424886dcb7e305eb_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:ae786598501725df58ae66ce52607fb8f0c325456537cf41e55cae33ccd4e370_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:0d78ff17f71f5f742aae872a9a15c48a5bf0baa328b85d627ae177bf2c88e3da_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:1a51f636af388a11694876bcea3acb73885479b1b7e02417b4c13c8fde93ab2a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:7aa9a1a8a24b2861178d0f64ae4593cc1668562f9844f405e05cf47e94229a09_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:e9e0770bdb543dd42aa3c3aa5014cbf19d913da8f58e4d69eb58132421137ac6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:5540377f87365b5501ec4bac45334b0fc1658635c3347505fa52fe11e6f9098f_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b2c2987a6048c3e65be46209059f78067a7d0ebdf8d4481c607a8f322696e903_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:e3ab5b8e9d1b5306ee3e8bb46d54b5b7579653117db71f6f80bf4a7f0abbc62f_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:fb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:068743012df5f7f0ce25e785630555ce532d50ec32a17a66e51108a5096ae38a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:0f2106026942ca06110301ece4f911b7ea0c50461cde3a5c8710e529c7f7c4c6_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dae49f4e857b84f9bad0c3a477c43834cbea6118a719c793b00524ab19b7dc0a_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:eb5f0c7e8418bde2c4a059b8f7600f478cfbd3ff46f8f8fc407b50e8dc88691b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:0550d8ac592cf476506a992d0d3f7beb4e6aa4414f259cda47a80e4749311537_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b19bfad20ee4fb3de2075251b3eb2c1ea6a76b68edac2c3bbd4523c0aa0346a8_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:e8e427cc5103d412b4677c3aa93912cb82a5b5db8be8d21992f4341bf404f75b_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ebe846db7b0733c85850182d709103faf3725b27b2daa3b9d08b23212dbd5cca_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:f838339b4bd024f76fead96f23892c7800ffdfb243538369bed23c4f64eef8e3_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:065492e0defff65abc0c2fb776b19506e65ff65924e39eaa4e2488e884376dea_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:0d0a2e283bcfc021884410130d3dba6b7b4edfc28223cf7a2e203c2b6b3e6a9b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:42309d715ad9d81fd87b5e20d0ae8f41c4ec1f05f71e3b55b610ac6533d75253_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4e81294ae472aa938a644e4672b264f5a71e3935e83322c238c960cf8d440005_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2512626"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in gopacket, a Go library for packet processing. Multiple layer decoders in gopacket use attacker-controlled lengths, counts, or offsets without proper validation against packet buffers. A remote, unauthenticated attacker can exploit this by sending a specially crafted packet, which, when decoded, triggers an unrecovered panic. This can lead to a remote Denial of Service (DoS) condition, making the affected system unavailable.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/gopacket/gopacket: gopacket: Remote Denial of Service via crafted packet processing",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw was found in gopacket, a Go library for packet processing. Multiple protocol layer decoders (TLS, DHCPv4, sFlow, IPSec AH, VRRPv2, Diameter, GTPv1-U, ERSPAN II, LCM, RadioTap, Dot11, and others) use attacker-controlled length, count, or offset fields to index or slice packet buffers without first validating them against the actual buffer size. A single malformed packet triggers an out-of-bounds slice or unsigned-integer underflow panic. When packets are decoded via the high-performance DecodingLayerParser or direct DecodeFromBytes path \u2014 the common pattern used by network monitors and intrusion-detection systems \u2014 the panic is not recovered and crashes the process, causing an unauthenticated remote denial of service. Applications using only gopacket.NewPacket with default options recover the panic into an error and are not crashed. Red Hat Network Observability components (CLI and eBPF agent) ship gopacket v1.5.0 and use it for packet capture, making them vulnerable.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:2fda4c6642fd343cf7bd0fe629e4d85ae95c5180b8f544c464980a7c7dde9e58_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:97a0788b5ac604ca74362198517f87499da2ec26dd449cf5fb7d6eddf28de9f6_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:ada851d78ec38f12688e6a64166767ddd1c960f6099604e0abf06d18ad74519a_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b307464aa7f189abb67b951542d74b1f89940412fd4d08ab89a9aac25de4fb38_arm64"
        ],
        "known_not_affected": [
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:474cf8c7500c50dfd569180570f00d9649691a8621ce34f82957e53d2ad95a66_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:667964ca0a8379a75425a90e7f1a3c109804e91b6fbc38aa9ecc72d57949925b_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:9d1fac43e376171a8666d299e4d06f50e102695266e5a8bf424886dcb7e305eb_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:ae786598501725df58ae66ce52607fb8f0c325456537cf41e55cae33ccd4e370_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:0d78ff17f71f5f742aae872a9a15c48a5bf0baa328b85d627ae177bf2c88e3da_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:1a51f636af388a11694876bcea3acb73885479b1b7e02417b4c13c8fde93ab2a_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:7aa9a1a8a24b2861178d0f64ae4593cc1668562f9844f405e05cf47e94229a09_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:e9e0770bdb543dd42aa3c3aa5014cbf19d913da8f58e4d69eb58132421137ac6_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:5540377f87365b5501ec4bac45334b0fc1658635c3347505fa52fe11e6f9098f_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b2c2987a6048c3e65be46209059f78067a7d0ebdf8d4481c607a8f322696e903_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:e3ab5b8e9d1b5306ee3e8bb46d54b5b7579653117db71f6f80bf4a7f0abbc62f_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:fb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:068743012df5f7f0ce25e785630555ce532d50ec32a17a66e51108a5096ae38a_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:0f2106026942ca06110301ece4f911b7ea0c50461cde3a5c8710e529c7f7c4c6_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dae49f4e857b84f9bad0c3a477c43834cbea6118a719c793b00524ab19b7dc0a_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:eb5f0c7e8418bde2c4a059b8f7600f478cfbd3ff46f8f8fc407b50e8dc88691b_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:0550d8ac592cf476506a992d0d3f7beb4e6aa4414f259cda47a80e4749311537_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b19bfad20ee4fb3de2075251b3eb2c1ea6a76b68edac2c3bbd4523c0aa0346a8_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:e8e427cc5103d412b4677c3aa93912cb82a5b5db8be8d21992f4341bf404f75b_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ebe846db7b0733c85850182d709103faf3725b27b2daa3b9d08b23212dbd5cca_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:f838339b4bd024f76fead96f23892c7800ffdfb243538369bed23c4f64eef8e3_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:065492e0defff65abc0c2fb776b19506e65ff65924e39eaa4e2488e884376dea_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:0d0a2e283bcfc021884410130d3dba6b7b4edfc28223cf7a2e203c2b6b3e6a9b_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:42309d715ad9d81fd87b5e20d0ae8f41c4ec1f05f71e3b55b610ac6533d75253_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4e81294ae472aa938a644e4672b264f5a71e3935e83322c238c960cf8d440005_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-65819"
        },
        {
          "category": "external",
          "summary": "RHBZ#2512626",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2512626"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-65819",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-65819"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-65819",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-65819"
        },
        {
          "category": "external",
          "summary": "https://github.com/gopacket/gopacket/commit/210f25fb9b3ca1af2eb649936f78ad6991b6c9c5",
          "url": "https://github.com/gopacket/gopacket/commit/210f25fb9b3ca1af2eb649936f78ad6991b6c9c5"
        },
        {
          "category": "external",
          "summary": "https://github.com/gopacket/gopacket/releases/tag/v1.7.0",
          "url": "https://github.com/gopacket/gopacket/releases/tag/v1.7.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/gopacket/gopacket/security/advisories/GHSA-8mcr-459q-5mx2",
          "url": "https://github.com/gopacket/gopacket/security/advisories/GHSA-8mcr-459q-5mx2"
        }
      ],
      "release_date": "2026-08-07T19:19:16.032000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-23T06:31:49+00:00",
          "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:2fda4c6642fd343cf7bd0fe629e4d85ae95c5180b8f544c464980a7c7dde9e58_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:97a0788b5ac604ca74362198517f87499da2ec26dd449cf5fb7d6eddf28de9f6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:ada851d78ec38f12688e6a64166767ddd1c960f6099604e0abf06d18ad74519a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b307464aa7f189abb67b951542d74b1f89940412fd4d08ab89a9aac25de4fb38_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:70593"
        },
        {
          "category": "workaround",
          "details": "- Upgrade gopacket to a version containing commit 210f25f or later.\n- If upgrading is not immediately possible, restrict network access to services that process untrusted packet data using gopacket. Where possible, use the recovering `gopacket.NewPacket(..., gopacket.Default)` code path instead of `DecodingLayerParser` or direct `DecodeFromBytes` calls, accepting the performance trade-off. Ensure that packet capture interfaces are not exposed to untrusted network segments.",
          "product_ids": [
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:2fda4c6642fd343cf7bd0fe629e4d85ae95c5180b8f544c464980a7c7dde9e58_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:97a0788b5ac604ca74362198517f87499da2ec26dd449cf5fb7d6eddf28de9f6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:ada851d78ec38f12688e6a64166767ddd1c960f6099604e0abf06d18ad74519a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b307464aa7f189abb67b951542d74b1f89940412fd4d08ab89a9aac25de4fb38_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:474cf8c7500c50dfd569180570f00d9649691a8621ce34f82957e53d2ad95a66_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:667964ca0a8379a75425a90e7f1a3c109804e91b6fbc38aa9ecc72d57949925b_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:9d1fac43e376171a8666d299e4d06f50e102695266e5a8bf424886dcb7e305eb_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:ae786598501725df58ae66ce52607fb8f0c325456537cf41e55cae33ccd4e370_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:0d78ff17f71f5f742aae872a9a15c48a5bf0baa328b85d627ae177bf2c88e3da_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:1a51f636af388a11694876bcea3acb73885479b1b7e02417b4c13c8fde93ab2a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:7aa9a1a8a24b2861178d0f64ae4593cc1668562f9844f405e05cf47e94229a09_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:e9e0770bdb543dd42aa3c3aa5014cbf19d913da8f58e4d69eb58132421137ac6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:5540377f87365b5501ec4bac45334b0fc1658635c3347505fa52fe11e6f9098f_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b2c2987a6048c3e65be46209059f78067a7d0ebdf8d4481c607a8f322696e903_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:e3ab5b8e9d1b5306ee3e8bb46d54b5b7579653117db71f6f80bf4a7f0abbc62f_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:fb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:068743012df5f7f0ce25e785630555ce532d50ec32a17a66e51108a5096ae38a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:0f2106026942ca06110301ece4f911b7ea0c50461cde3a5c8710e529c7f7c4c6_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dae49f4e857b84f9bad0c3a477c43834cbea6118a719c793b00524ab19b7dc0a_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:eb5f0c7e8418bde2c4a059b8f7600f478cfbd3ff46f8f8fc407b50e8dc88691b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:0550d8ac592cf476506a992d0d3f7beb4e6aa4414f259cda47a80e4749311537_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b19bfad20ee4fb3de2075251b3eb2c1ea6a76b68edac2c3bbd4523c0aa0346a8_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:e8e427cc5103d412b4677c3aa93912cb82a5b5db8be8d21992f4341bf404f75b_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ebe846db7b0733c85850182d709103faf3725b27b2daa3b9d08b23212dbd5cca_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:f838339b4bd024f76fead96f23892c7800ffdfb243538369bed23c4f64eef8e3_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:065492e0defff65abc0c2fb776b19506e65ff65924e39eaa4e2488e884376dea_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:0d0a2e283bcfc021884410130d3dba6b7b4edfc28223cf7a2e203c2b6b3e6a9b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:42309d715ad9d81fd87b5e20d0ae8f41c4ec1f05f71e3b55b610ac6533d75253_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4e81294ae472aa938a644e4672b264f5a71e3935e83322c238c960cf8d440005_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:2fda4c6642fd343cf7bd0fe629e4d85ae95c5180b8f544c464980a7c7dde9e58_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:97a0788b5ac604ca74362198517f87499da2ec26dd449cf5fb7d6eddf28de9f6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:ada851d78ec38f12688e6a64166767ddd1c960f6099604e0abf06d18ad74519a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b307464aa7f189abb67b951542d74b1f89940412fd4d08ab89a9aac25de4fb38_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:474cf8c7500c50dfd569180570f00d9649691a8621ce34f82957e53d2ad95a66_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:667964ca0a8379a75425a90e7f1a3c109804e91b6fbc38aa9ecc72d57949925b_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:9d1fac43e376171a8666d299e4d06f50e102695266e5a8bf424886dcb7e305eb_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:ae786598501725df58ae66ce52607fb8f0c325456537cf41e55cae33ccd4e370_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:0d78ff17f71f5f742aae872a9a15c48a5bf0baa328b85d627ae177bf2c88e3da_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:1a51f636af388a11694876bcea3acb73885479b1b7e02417b4c13c8fde93ab2a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:7aa9a1a8a24b2861178d0f64ae4593cc1668562f9844f405e05cf47e94229a09_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:e9e0770bdb543dd42aa3c3aa5014cbf19d913da8f58e4d69eb58132421137ac6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:5540377f87365b5501ec4bac45334b0fc1658635c3347505fa52fe11e6f9098f_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b2c2987a6048c3e65be46209059f78067a7d0ebdf8d4481c607a8f322696e903_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:e3ab5b8e9d1b5306ee3e8bb46d54b5b7579653117db71f6f80bf4a7f0abbc62f_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:fb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:068743012df5f7f0ce25e785630555ce532d50ec32a17a66e51108a5096ae38a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:0f2106026942ca06110301ece4f911b7ea0c50461cde3a5c8710e529c7f7c4c6_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dae49f4e857b84f9bad0c3a477c43834cbea6118a719c793b00524ab19b7dc0a_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:eb5f0c7e8418bde2c4a059b8f7600f478cfbd3ff46f8f8fc407b50e8dc88691b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:0550d8ac592cf476506a992d0d3f7beb4e6aa4414f259cda47a80e4749311537_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b19bfad20ee4fb3de2075251b3eb2c1ea6a76b68edac2c3bbd4523c0aa0346a8_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:e8e427cc5103d412b4677c3aa93912cb82a5b5db8be8d21992f4341bf404f75b_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ebe846db7b0733c85850182d709103faf3725b27b2daa3b9d08b23212dbd5cca_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:f838339b4bd024f76fead96f23892c7800ffdfb243538369bed23c4f64eef8e3_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:065492e0defff65abc0c2fb776b19506e65ff65924e39eaa4e2488e884376dea_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:0d0a2e283bcfc021884410130d3dba6b7b4edfc28223cf7a2e203c2b6b3e6a9b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:42309d715ad9d81fd87b5e20d0ae8f41c4ec1f05f71e3b55b610ac6533d75253_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4e81294ae472aa938a644e4672b264f5a71e3935e83322c238c960cf8d440005_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/gopacket/gopacket: gopacket: Remote Denial of Service via crafted packet processing"
    },
    {
      "cve": "CVE-2026-67213",
      "cwe": {
        "id": "CWE-835",
        "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
      },
      "discovery_date": "2026-07-29T14:01:09.009518+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:2fda4c6642fd343cf7bd0fe629e4d85ae95c5180b8f544c464980a7c7dde9e58_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:97a0788b5ac604ca74362198517f87499da2ec26dd449cf5fb7d6eddf28de9f6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:ada851d78ec38f12688e6a64166767ddd1c960f6099604e0abf06d18ad74519a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b307464aa7f189abb67b951542d74b1f89940412fd4d08ab89a9aac25de4fb38_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:474cf8c7500c50dfd569180570f00d9649691a8621ce34f82957e53d2ad95a66_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:667964ca0a8379a75425a90e7f1a3c109804e91b6fbc38aa9ecc72d57949925b_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:9d1fac43e376171a8666d299e4d06f50e102695266e5a8bf424886dcb7e305eb_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:ae786598501725df58ae66ce52607fb8f0c325456537cf41e55cae33ccd4e370_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:5540377f87365b5501ec4bac45334b0fc1658635c3347505fa52fe11e6f9098f_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b2c2987a6048c3e65be46209059f78067a7d0ebdf8d4481c607a8f322696e903_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:e3ab5b8e9d1b5306ee3e8bb46d54b5b7579653117db71f6f80bf4a7f0abbc62f_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:fb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:068743012df5f7f0ce25e785630555ce532d50ec32a17a66e51108a5096ae38a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:0f2106026942ca06110301ece4f911b7ea0c50461cde3a5c8710e529c7f7c4c6_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dae49f4e857b84f9bad0c3a477c43834cbea6118a719c793b00524ab19b7dc0a_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:eb5f0c7e8418bde2c4a059b8f7600f478cfbd3ff46f8f8fc407b50e8dc88691b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:0550d8ac592cf476506a992d0d3f7beb4e6aa4414f259cda47a80e4749311537_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b19bfad20ee4fb3de2075251b3eb2c1ea6a76b68edac2c3bbd4523c0aa0346a8_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:e8e427cc5103d412b4677c3aa93912cb82a5b5db8be8d21992f4341bf404f75b_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ebe846db7b0733c85850182d709103faf3725b27b2daa3b9d08b23212dbd5cca_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:f838339b4bd024f76fead96f23892c7800ffdfb243538369bed23c4f64eef8e3_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:065492e0defff65abc0c2fb776b19506e65ff65924e39eaa4e2488e884376dea_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:0d0a2e283bcfc021884410130d3dba6b7b4edfc28223cf7a2e203c2b6b3e6a9b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:42309d715ad9d81fd87b5e20d0ae8f41c4ec1f05f71e3b55b610ac6533d75253_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4e81294ae472aa938a644e4672b264f5a71e3935e83322c238c960cf8d440005_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2508406"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in nanoid (Nano ID), a small, secure, and URL-friendly unique string ID generator. An attacker could exploit this vulnerability by providing a zero-size input to the customAlphabet or customRandom functions. This would cause an infinite loop, leading to a denial of service (DoS) condition by hanging the application\u0027s calling thread.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "nanoid: nanoid: Denial of Service via infinite loop in random ID generation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "An algorithmic denial of service flaw was found in the `nanoid` library. When calling `customAlphabet` or `customRandom` with a `size` parameter of `0`, the internal generation loop fails to meet its termination condition. In Node.js or browser execution contexts, an attacker who supplies an unvalidated, zero-value size parameter to these functions causes the thread to enter an infinite loop, driving CPU utilization to 100% and completely blocking event loop execution for that thread.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:0d78ff17f71f5f742aae872a9a15c48a5bf0baa328b85d627ae177bf2c88e3da_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:1a51f636af388a11694876bcea3acb73885479b1b7e02417b4c13c8fde93ab2a_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:7aa9a1a8a24b2861178d0f64ae4593cc1668562f9844f405e05cf47e94229a09_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:e9e0770bdb543dd42aa3c3aa5014cbf19d913da8f58e4d69eb58132421137ac6_amd64"
        ],
        "known_not_affected": [
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:2fda4c6642fd343cf7bd0fe629e4d85ae95c5180b8f544c464980a7c7dde9e58_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:97a0788b5ac604ca74362198517f87499da2ec26dd449cf5fb7d6eddf28de9f6_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:ada851d78ec38f12688e6a64166767ddd1c960f6099604e0abf06d18ad74519a_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b307464aa7f189abb67b951542d74b1f89940412fd4d08ab89a9aac25de4fb38_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:474cf8c7500c50dfd569180570f00d9649691a8621ce34f82957e53d2ad95a66_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:667964ca0a8379a75425a90e7f1a3c109804e91b6fbc38aa9ecc72d57949925b_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:9d1fac43e376171a8666d299e4d06f50e102695266e5a8bf424886dcb7e305eb_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:ae786598501725df58ae66ce52607fb8f0c325456537cf41e55cae33ccd4e370_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:5540377f87365b5501ec4bac45334b0fc1658635c3347505fa52fe11e6f9098f_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b2c2987a6048c3e65be46209059f78067a7d0ebdf8d4481c607a8f322696e903_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:e3ab5b8e9d1b5306ee3e8bb46d54b5b7579653117db71f6f80bf4a7f0abbc62f_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:fb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:068743012df5f7f0ce25e785630555ce532d50ec32a17a66e51108a5096ae38a_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:0f2106026942ca06110301ece4f911b7ea0c50461cde3a5c8710e529c7f7c4c6_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dae49f4e857b84f9bad0c3a477c43834cbea6118a719c793b00524ab19b7dc0a_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:eb5f0c7e8418bde2c4a059b8f7600f478cfbd3ff46f8f8fc407b50e8dc88691b_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:0550d8ac592cf476506a992d0d3f7beb4e6aa4414f259cda47a80e4749311537_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b19bfad20ee4fb3de2075251b3eb2c1ea6a76b68edac2c3bbd4523c0aa0346a8_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:e8e427cc5103d412b4677c3aa93912cb82a5b5db8be8d21992f4341bf404f75b_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ebe846db7b0733c85850182d709103faf3725b27b2daa3b9d08b23212dbd5cca_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:f838339b4bd024f76fead96f23892c7800ffdfb243538369bed23c4f64eef8e3_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:065492e0defff65abc0c2fb776b19506e65ff65924e39eaa4e2488e884376dea_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:0d0a2e283bcfc021884410130d3dba6b7b4edfc28223cf7a2e203c2b6b3e6a9b_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:42309d715ad9d81fd87b5e20d0ae8f41c4ec1f05f71e3b55b610ac6533d75253_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4e81294ae472aa938a644e4672b264f5a71e3935e83322c238c960cf8d440005_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-67213"
        },
        {
          "category": "external",
          "summary": "RHBZ#2508406",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2508406"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-67213",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-67213"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-67213",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-67213"
        },
        {
          "category": "external",
          "summary": "https://github.com/ai/nanoid/commit/cb3626d0f3342fdf179cd425fd9c4fbb92c7d0e7",
          "url": "https://github.com/ai/nanoid/commit/cb3626d0f3342fdf179cd425fd9c4fbb92c7d0e7"
        },
        {
          "category": "external",
          "summary": "https://github.com/ai/nanoid/releases/tag/5.1.6",
          "url": "https://github.com/ai/nanoid/releases/tag/5.1.6"
        },
        {
          "category": "external",
          "summary": "https://www.vulncheck.com/advisories/nanoid-before-infinite-loop-via-zero-size-in-customalphabet-and-customrandom",
          "url": "https://www.vulncheck.com/advisories/nanoid-before-infinite-loop-via-zero-size-in-customalphabet-and-customrandom"
        }
      ],
      "release_date": "2026-07-29T13:32:01.534000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-23T06:31:49+00:00",
          "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:0d78ff17f71f5f742aae872a9a15c48a5bf0baa328b85d627ae177bf2c88e3da_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:1a51f636af388a11694876bcea3acb73885479b1b7e02417b4c13c8fde93ab2a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:7aa9a1a8a24b2861178d0f64ae4593cc1668562f9844f405e05cf47e94229a09_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:e9e0770bdb543dd42aa3c3aa5014cbf19d913da8f58e4d69eb58132421137ac6_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:70593"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, ensure application code validates the size parameter passed to customAlphabet or customRandom, rejecting or sanitizing zero-value inputs before passing them to nanoid.",
          "product_ids": [
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:2fda4c6642fd343cf7bd0fe629e4d85ae95c5180b8f544c464980a7c7dde9e58_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:97a0788b5ac604ca74362198517f87499da2ec26dd449cf5fb7d6eddf28de9f6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:ada851d78ec38f12688e6a64166767ddd1c960f6099604e0abf06d18ad74519a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b307464aa7f189abb67b951542d74b1f89940412fd4d08ab89a9aac25de4fb38_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:474cf8c7500c50dfd569180570f00d9649691a8621ce34f82957e53d2ad95a66_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:667964ca0a8379a75425a90e7f1a3c109804e91b6fbc38aa9ecc72d57949925b_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:9d1fac43e376171a8666d299e4d06f50e102695266e5a8bf424886dcb7e305eb_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:ae786598501725df58ae66ce52607fb8f0c325456537cf41e55cae33ccd4e370_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:0d78ff17f71f5f742aae872a9a15c48a5bf0baa328b85d627ae177bf2c88e3da_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:1a51f636af388a11694876bcea3acb73885479b1b7e02417b4c13c8fde93ab2a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:7aa9a1a8a24b2861178d0f64ae4593cc1668562f9844f405e05cf47e94229a09_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:e9e0770bdb543dd42aa3c3aa5014cbf19d913da8f58e4d69eb58132421137ac6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:5540377f87365b5501ec4bac45334b0fc1658635c3347505fa52fe11e6f9098f_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b2c2987a6048c3e65be46209059f78067a7d0ebdf8d4481c607a8f322696e903_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:e3ab5b8e9d1b5306ee3e8bb46d54b5b7579653117db71f6f80bf4a7f0abbc62f_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:fb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:068743012df5f7f0ce25e785630555ce532d50ec32a17a66e51108a5096ae38a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:0f2106026942ca06110301ece4f911b7ea0c50461cde3a5c8710e529c7f7c4c6_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dae49f4e857b84f9bad0c3a477c43834cbea6118a719c793b00524ab19b7dc0a_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:eb5f0c7e8418bde2c4a059b8f7600f478cfbd3ff46f8f8fc407b50e8dc88691b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:0550d8ac592cf476506a992d0d3f7beb4e6aa4414f259cda47a80e4749311537_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b19bfad20ee4fb3de2075251b3eb2c1ea6a76b68edac2c3bbd4523c0aa0346a8_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:e8e427cc5103d412b4677c3aa93912cb82a5b5db8be8d21992f4341bf404f75b_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ebe846db7b0733c85850182d709103faf3725b27b2daa3b9d08b23212dbd5cca_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:f838339b4bd024f76fead96f23892c7800ffdfb243538369bed23c4f64eef8e3_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:065492e0defff65abc0c2fb776b19506e65ff65924e39eaa4e2488e884376dea_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:0d0a2e283bcfc021884410130d3dba6b7b4edfc28223cf7a2e203c2b6b3e6a9b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:42309d715ad9d81fd87b5e20d0ae8f41c4ec1f05f71e3b55b610ac6533d75253_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4e81294ae472aa938a644e4672b264f5a71e3935e83322c238c960cf8d440005_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:2fda4c6642fd343cf7bd0fe629e4d85ae95c5180b8f544c464980a7c7dde9e58_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:97a0788b5ac604ca74362198517f87499da2ec26dd449cf5fb7d6eddf28de9f6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:ada851d78ec38f12688e6a64166767ddd1c960f6099604e0abf06d18ad74519a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b307464aa7f189abb67b951542d74b1f89940412fd4d08ab89a9aac25de4fb38_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:474cf8c7500c50dfd569180570f00d9649691a8621ce34f82957e53d2ad95a66_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:667964ca0a8379a75425a90e7f1a3c109804e91b6fbc38aa9ecc72d57949925b_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:9d1fac43e376171a8666d299e4d06f50e102695266e5a8bf424886dcb7e305eb_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:ae786598501725df58ae66ce52607fb8f0c325456537cf41e55cae33ccd4e370_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:0d78ff17f71f5f742aae872a9a15c48a5bf0baa328b85d627ae177bf2c88e3da_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:1a51f636af388a11694876bcea3acb73885479b1b7e02417b4c13c8fde93ab2a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:7aa9a1a8a24b2861178d0f64ae4593cc1668562f9844f405e05cf47e94229a09_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:e9e0770bdb543dd42aa3c3aa5014cbf19d913da8f58e4d69eb58132421137ac6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:5540377f87365b5501ec4bac45334b0fc1658635c3347505fa52fe11e6f9098f_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b2c2987a6048c3e65be46209059f78067a7d0ebdf8d4481c607a8f322696e903_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:e3ab5b8e9d1b5306ee3e8bb46d54b5b7579653117db71f6f80bf4a7f0abbc62f_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:fb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:068743012df5f7f0ce25e785630555ce532d50ec32a17a66e51108a5096ae38a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:0f2106026942ca06110301ece4f911b7ea0c50461cde3a5c8710e529c7f7c4c6_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dae49f4e857b84f9bad0c3a477c43834cbea6118a719c793b00524ab19b7dc0a_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:eb5f0c7e8418bde2c4a059b8f7600f478cfbd3ff46f8f8fc407b50e8dc88691b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:0550d8ac592cf476506a992d0d3f7beb4e6aa4414f259cda47a80e4749311537_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b19bfad20ee4fb3de2075251b3eb2c1ea6a76b68edac2c3bbd4523c0aa0346a8_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:e8e427cc5103d412b4677c3aa93912cb82a5b5db8be8d21992f4341bf404f75b_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ebe846db7b0733c85850182d709103faf3725b27b2daa3b9d08b23212dbd5cca_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:f838339b4bd024f76fead96f23892c7800ffdfb243538369bed23c4f64eef8e3_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:065492e0defff65abc0c2fb776b19506e65ff65924e39eaa4e2488e884376dea_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:0d0a2e283bcfc021884410130d3dba6b7b4edfc28223cf7a2e203c2b6b3e6a9b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:42309d715ad9d81fd87b5e20d0ae8f41c4ec1f05f71e3b55b610ac6533d75253_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4e81294ae472aa938a644e4672b264f5a71e3935e83322c238c960cf8d440005_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "nanoid: nanoid: Denial of Service via infinite loop in random ID generation"
    },
    {
      "cve": "CVE-2026-75899",
      "cwe": {
        "id": "CWE-140",
        "name": "Improper Neutralization of Delimiters"
      },
      "discovery_date": "2026-08-24T09:51:05.559475+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:2fda4c6642fd343cf7bd0fe629e4d85ae95c5180b8f544c464980a7c7dde9e58_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:97a0788b5ac604ca74362198517f87499da2ec26dd449cf5fb7d6eddf28de9f6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:ada851d78ec38f12688e6a64166767ddd1c960f6099604e0abf06d18ad74519a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b307464aa7f189abb67b951542d74b1f89940412fd4d08ab89a9aac25de4fb38_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:474cf8c7500c50dfd569180570f00d9649691a8621ce34f82957e53d2ad95a66_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:667964ca0a8379a75425a90e7f1a3c109804e91b6fbc38aa9ecc72d57949925b_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:9d1fac43e376171a8666d299e4d06f50e102695266e5a8bf424886dcb7e305eb_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:ae786598501725df58ae66ce52607fb8f0c325456537cf41e55cae33ccd4e370_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:068743012df5f7f0ce25e785630555ce532d50ec32a17a66e51108a5096ae38a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:0f2106026942ca06110301ece4f911b7ea0c50461cde3a5c8710e529c7f7c4c6_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dae49f4e857b84f9bad0c3a477c43834cbea6118a719c793b00524ab19b7dc0a_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:eb5f0c7e8418bde2c4a059b8f7600f478cfbd3ff46f8f8fc407b50e8dc88691b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:0550d8ac592cf476506a992d0d3f7beb4e6aa4414f259cda47a80e4749311537_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b19bfad20ee4fb3de2075251b3eb2c1ea6a76b68edac2c3bbd4523c0aa0346a8_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:e8e427cc5103d412b4677c3aa93912cb82a5b5db8be8d21992f4341bf404f75b_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ebe846db7b0733c85850182d709103faf3725b27b2daa3b9d08b23212dbd5cca_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:f838339b4bd024f76fead96f23892c7800ffdfb243538369bed23c4f64eef8e3_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:065492e0defff65abc0c2fb776b19506e65ff65924e39eaa4e2488e884376dea_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:0d0a2e283bcfc021884410130d3dba6b7b4edfc28223cf7a2e203c2b6b3e6a9b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:42309d715ad9d81fd87b5e20d0ae8f41c4ec1f05f71e3b55b610ac6533d75253_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4e81294ae472aa938a644e4672b264f5a71e3935e83322c238c960cf8d440005_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2521778"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in fast-uri, a URI parser for Node.js. The component incorrectly decodes percent escapes in a hostname twice during URI parsing and authority recomposition. This double decoding can allow a remote attacker to manipulate a URI to point to a different network destination, such as a loopback address. This vulnerability can lead to Server-Side Request Forgery (SSRF) and bypass host-based security policies.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "fast-uri: fast-uri: Server-Side Request Forgery via repeated hostname percent-decoding",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw in the `fast-uri` library, used by applications for URI parsing, allows for Server-Side Request Forgery (SSRF) and host-policy bypass. By crafting a doubly percent-encoded hostname in an untrusted HTTP-family URI, an attacker could redirect internal application requests to arbitrary network destinations, potentially bypassing security controls and accessing internal services. This risk is present in Red Hat products that process untrusted URIs using affected versions of `fast-uri`.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:0d78ff17f71f5f742aae872a9a15c48a5bf0baa328b85d627ae177bf2c88e3da_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:1a51f636af388a11694876bcea3acb73885479b1b7e02417b4c13c8fde93ab2a_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:7aa9a1a8a24b2861178d0f64ae4593cc1668562f9844f405e05cf47e94229a09_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:e9e0770bdb543dd42aa3c3aa5014cbf19d913da8f58e4d69eb58132421137ac6_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:5540377f87365b5501ec4bac45334b0fc1658635c3347505fa52fe11e6f9098f_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b2c2987a6048c3e65be46209059f78067a7d0ebdf8d4481c607a8f322696e903_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:e3ab5b8e9d1b5306ee3e8bb46d54b5b7579653117db71f6f80bf4a7f0abbc62f_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:fb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a_amd64"
        ],
        "known_not_affected": [
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:2fda4c6642fd343cf7bd0fe629e4d85ae95c5180b8f544c464980a7c7dde9e58_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:97a0788b5ac604ca74362198517f87499da2ec26dd449cf5fb7d6eddf28de9f6_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:ada851d78ec38f12688e6a64166767ddd1c960f6099604e0abf06d18ad74519a_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b307464aa7f189abb67b951542d74b1f89940412fd4d08ab89a9aac25de4fb38_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:474cf8c7500c50dfd569180570f00d9649691a8621ce34f82957e53d2ad95a66_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:667964ca0a8379a75425a90e7f1a3c109804e91b6fbc38aa9ecc72d57949925b_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:9d1fac43e376171a8666d299e4d06f50e102695266e5a8bf424886dcb7e305eb_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:ae786598501725df58ae66ce52607fb8f0c325456537cf41e55cae33ccd4e370_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:068743012df5f7f0ce25e785630555ce532d50ec32a17a66e51108a5096ae38a_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:0f2106026942ca06110301ece4f911b7ea0c50461cde3a5c8710e529c7f7c4c6_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dae49f4e857b84f9bad0c3a477c43834cbea6118a719c793b00524ab19b7dc0a_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:eb5f0c7e8418bde2c4a059b8f7600f478cfbd3ff46f8f8fc407b50e8dc88691b_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:0550d8ac592cf476506a992d0d3f7beb4e6aa4414f259cda47a80e4749311537_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b19bfad20ee4fb3de2075251b3eb2c1ea6a76b68edac2c3bbd4523c0aa0346a8_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:e8e427cc5103d412b4677c3aa93912cb82a5b5db8be8d21992f4341bf404f75b_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ebe846db7b0733c85850182d709103faf3725b27b2daa3b9d08b23212dbd5cca_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:f838339b4bd024f76fead96f23892c7800ffdfb243538369bed23c4f64eef8e3_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:065492e0defff65abc0c2fb776b19506e65ff65924e39eaa4e2488e884376dea_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:0d0a2e283bcfc021884410130d3dba6b7b4edfc28223cf7a2e203c2b6b3e6a9b_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:42309d715ad9d81fd87b5e20d0ae8f41c4ec1f05f71e3b55b610ac6533d75253_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4e81294ae472aa938a644e4672b264f5a71e3935e83322c238c960cf8d440005_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-75899"
        },
        {
          "category": "external",
          "summary": "RHBZ#2521778",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2521778"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-75899",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-75899"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-75899",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-75899"
        },
        {
          "category": "external",
          "summary": "https://cna.openjsf.org/security-advisories.html",
          "url": "https://cna.openjsf.org/security-advisories.html"
        },
        {
          "category": "external",
          "summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-fph4-wmhf-6fwf",
          "url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-fph4-wmhf-6fwf"
        }
      ],
      "release_date": "2026-08-24T09:40:19.801000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-23T06:31:49+00:00",
          "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:0d78ff17f71f5f742aae872a9a15c48a5bf0baa328b85d627ae177bf2c88e3da_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:1a51f636af388a11694876bcea3acb73885479b1b7e02417b4c13c8fde93ab2a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:7aa9a1a8a24b2861178d0f64ae4593cc1668562f9844f405e05cf47e94229a09_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:e9e0770bdb543dd42aa3c3aa5014cbf19d913da8f58e4d69eb58132421137ac6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:5540377f87365b5501ec4bac45334b0fc1658635c3347505fa52fe11e6f9098f_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b2c2987a6048c3e65be46209059f78067a7d0ebdf8d4481c607a8f322696e903_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:e3ab5b8e9d1b5306ee3e8bb46d54b5b7579653117db71f6f80bf4a7f0abbc62f_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:fb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:70593"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:2fda4c6642fd343cf7bd0fe629e4d85ae95c5180b8f544c464980a7c7dde9e58_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:97a0788b5ac604ca74362198517f87499da2ec26dd449cf5fb7d6eddf28de9f6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:ada851d78ec38f12688e6a64166767ddd1c960f6099604e0abf06d18ad74519a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b307464aa7f189abb67b951542d74b1f89940412fd4d08ab89a9aac25de4fb38_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:474cf8c7500c50dfd569180570f00d9649691a8621ce34f82957e53d2ad95a66_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:667964ca0a8379a75425a90e7f1a3c109804e91b6fbc38aa9ecc72d57949925b_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:9d1fac43e376171a8666d299e4d06f50e102695266e5a8bf424886dcb7e305eb_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:ae786598501725df58ae66ce52607fb8f0c325456537cf41e55cae33ccd4e370_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:0d78ff17f71f5f742aae872a9a15c48a5bf0baa328b85d627ae177bf2c88e3da_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:1a51f636af388a11694876bcea3acb73885479b1b7e02417b4c13c8fde93ab2a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:7aa9a1a8a24b2861178d0f64ae4593cc1668562f9844f405e05cf47e94229a09_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:e9e0770bdb543dd42aa3c3aa5014cbf19d913da8f58e4d69eb58132421137ac6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:5540377f87365b5501ec4bac45334b0fc1658635c3347505fa52fe11e6f9098f_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b2c2987a6048c3e65be46209059f78067a7d0ebdf8d4481c607a8f322696e903_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:e3ab5b8e9d1b5306ee3e8bb46d54b5b7579653117db71f6f80bf4a7f0abbc62f_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:fb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:068743012df5f7f0ce25e785630555ce532d50ec32a17a66e51108a5096ae38a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:0f2106026942ca06110301ece4f911b7ea0c50461cde3a5c8710e529c7f7c4c6_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dae49f4e857b84f9bad0c3a477c43834cbea6118a719c793b00524ab19b7dc0a_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:eb5f0c7e8418bde2c4a059b8f7600f478cfbd3ff46f8f8fc407b50e8dc88691b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:0550d8ac592cf476506a992d0d3f7beb4e6aa4414f259cda47a80e4749311537_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b19bfad20ee4fb3de2075251b3eb2c1ea6a76b68edac2c3bbd4523c0aa0346a8_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:e8e427cc5103d412b4677c3aa93912cb82a5b5db8be8d21992f4341bf404f75b_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ebe846db7b0733c85850182d709103faf3725b27b2daa3b9d08b23212dbd5cca_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:f838339b4bd024f76fead96f23892c7800ffdfb243538369bed23c4f64eef8e3_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:065492e0defff65abc0c2fb776b19506e65ff65924e39eaa4e2488e884376dea_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:0d0a2e283bcfc021884410130d3dba6b7b4edfc28223cf7a2e203c2b6b3e6a9b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:42309d715ad9d81fd87b5e20d0ae8f41c4ec1f05f71e3b55b610ac6533d75253_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4e81294ae472aa938a644e4672b264f5a71e3935e83322c238c960cf8d440005_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:2fda4c6642fd343cf7bd0fe629e4d85ae95c5180b8f544c464980a7c7dde9e58_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:97a0788b5ac604ca74362198517f87499da2ec26dd449cf5fb7d6eddf28de9f6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:ada851d78ec38f12688e6a64166767ddd1c960f6099604e0abf06d18ad74519a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b307464aa7f189abb67b951542d74b1f89940412fd4d08ab89a9aac25de4fb38_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:474cf8c7500c50dfd569180570f00d9649691a8621ce34f82957e53d2ad95a66_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:667964ca0a8379a75425a90e7f1a3c109804e91b6fbc38aa9ecc72d57949925b_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:9d1fac43e376171a8666d299e4d06f50e102695266e5a8bf424886dcb7e305eb_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:ae786598501725df58ae66ce52607fb8f0c325456537cf41e55cae33ccd4e370_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:0d78ff17f71f5f742aae872a9a15c48a5bf0baa328b85d627ae177bf2c88e3da_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:1a51f636af388a11694876bcea3acb73885479b1b7e02417b4c13c8fde93ab2a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:7aa9a1a8a24b2861178d0f64ae4593cc1668562f9844f405e05cf47e94229a09_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:e9e0770bdb543dd42aa3c3aa5014cbf19d913da8f58e4d69eb58132421137ac6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:5540377f87365b5501ec4bac45334b0fc1658635c3347505fa52fe11e6f9098f_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b2c2987a6048c3e65be46209059f78067a7d0ebdf8d4481c607a8f322696e903_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:e3ab5b8e9d1b5306ee3e8bb46d54b5b7579653117db71f6f80bf4a7f0abbc62f_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:fb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:068743012df5f7f0ce25e785630555ce532d50ec32a17a66e51108a5096ae38a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:0f2106026942ca06110301ece4f911b7ea0c50461cde3a5c8710e529c7f7c4c6_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dae49f4e857b84f9bad0c3a477c43834cbea6118a719c793b00524ab19b7dc0a_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:eb5f0c7e8418bde2c4a059b8f7600f478cfbd3ff46f8f8fc407b50e8dc88691b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:0550d8ac592cf476506a992d0d3f7beb4e6aa4414f259cda47a80e4749311537_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b19bfad20ee4fb3de2075251b3eb2c1ea6a76b68edac2c3bbd4523c0aa0346a8_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:e8e427cc5103d412b4677c3aa93912cb82a5b5db8be8d21992f4341bf404f75b_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ebe846db7b0733c85850182d709103faf3725b27b2daa3b9d08b23212dbd5cca_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:f838339b4bd024f76fead96f23892c7800ffdfb243538369bed23c4f64eef8e3_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:065492e0defff65abc0c2fb776b19506e65ff65924e39eaa4e2488e884376dea_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:0d0a2e283bcfc021884410130d3dba6b7b4edfc28223cf7a2e203c2b6b3e6a9b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:42309d715ad9d81fd87b5e20d0ae8f41c4ec1f05f71e3b55b610ac6533d75253_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4e81294ae472aa938a644e4672b264f5a71e3935e83322c238c960cf8d440005_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "fast-uri: fast-uri: Server-Side Request Forgery via repeated hostname percent-decoding"
    },
    {
      "cve": "CVE-2026-75931",
      "cwe": {
        "id": "CWE-444",
        "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
      },
      "discovery_date": "2026-08-24T09:51:02.191062+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:2fda4c6642fd343cf7bd0fe629e4d85ae95c5180b8f544c464980a7c7dde9e58_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:97a0788b5ac604ca74362198517f87499da2ec26dd449cf5fb7d6eddf28de9f6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:ada851d78ec38f12688e6a64166767ddd1c960f6099604e0abf06d18ad74519a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b307464aa7f189abb67b951542d74b1f89940412fd4d08ab89a9aac25de4fb38_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:474cf8c7500c50dfd569180570f00d9649691a8621ce34f82957e53d2ad95a66_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:667964ca0a8379a75425a90e7f1a3c109804e91b6fbc38aa9ecc72d57949925b_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:9d1fac43e376171a8666d299e4d06f50e102695266e5a8bf424886dcb7e305eb_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:ae786598501725df58ae66ce52607fb8f0c325456537cf41e55cae33ccd4e370_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:068743012df5f7f0ce25e785630555ce532d50ec32a17a66e51108a5096ae38a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:0f2106026942ca06110301ece4f911b7ea0c50461cde3a5c8710e529c7f7c4c6_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dae49f4e857b84f9bad0c3a477c43834cbea6118a719c793b00524ab19b7dc0a_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:eb5f0c7e8418bde2c4a059b8f7600f478cfbd3ff46f8f8fc407b50e8dc88691b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:0550d8ac592cf476506a992d0d3f7beb4e6aa4414f259cda47a80e4749311537_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b19bfad20ee4fb3de2075251b3eb2c1ea6a76b68edac2c3bbd4523c0aa0346a8_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:e8e427cc5103d412b4677c3aa93912cb82a5b5db8be8d21992f4341bf404f75b_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ebe846db7b0733c85850182d709103faf3725b27b2daa3b9d08b23212dbd5cca_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:f838339b4bd024f76fead96f23892c7800ffdfb243538369bed23c4f64eef8e3_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:065492e0defff65abc0c2fb776b19506e65ff65924e39eaa4e2488e884376dea_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:0d0a2e283bcfc021884410130d3dba6b7b4edfc28223cf7a2e203c2b6b3e6a9b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:42309d715ad9d81fd87b5e20d0ae8f41c4ec1f05f71e3b55b610ac6533d75253_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4e81294ae472aa938a644e4672b264f5a71e3935e83322c238c960cf8d440005_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2521777"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in fast-uri, a URI parser for Node.js. This vulnerability arises because the parser fails to consistently convert internationalized domain names (IDN) to their standard ASCII form when processing scheme-relative references. This inconsistency can lead to host confusion, where an application might validate a URI against a security policy using one hostname, but then resolve to a different, potentially malicious, hostname. This discrepancy could allow an attacker to bypass security policies and access unauthorized resources.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "fast-uri: fast-uri: Host confusion via skipped IDN canonicalization",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:0d78ff17f71f5f742aae872a9a15c48a5bf0baa328b85d627ae177bf2c88e3da_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:1a51f636af388a11694876bcea3acb73885479b1b7e02417b4c13c8fde93ab2a_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:7aa9a1a8a24b2861178d0f64ae4593cc1668562f9844f405e05cf47e94229a09_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:e9e0770bdb543dd42aa3c3aa5014cbf19d913da8f58e4d69eb58132421137ac6_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:5540377f87365b5501ec4bac45334b0fc1658635c3347505fa52fe11e6f9098f_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b2c2987a6048c3e65be46209059f78067a7d0ebdf8d4481c607a8f322696e903_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:e3ab5b8e9d1b5306ee3e8bb46d54b5b7579653117db71f6f80bf4a7f0abbc62f_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:fb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a_amd64"
        ],
        "known_not_affected": [
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:2fda4c6642fd343cf7bd0fe629e4d85ae95c5180b8f544c464980a7c7dde9e58_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:97a0788b5ac604ca74362198517f87499da2ec26dd449cf5fb7d6eddf28de9f6_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:ada851d78ec38f12688e6a64166767ddd1c960f6099604e0abf06d18ad74519a_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b307464aa7f189abb67b951542d74b1f89940412fd4d08ab89a9aac25de4fb38_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:474cf8c7500c50dfd569180570f00d9649691a8621ce34f82957e53d2ad95a66_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:667964ca0a8379a75425a90e7f1a3c109804e91b6fbc38aa9ecc72d57949925b_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:9d1fac43e376171a8666d299e4d06f50e102695266e5a8bf424886dcb7e305eb_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:ae786598501725df58ae66ce52607fb8f0c325456537cf41e55cae33ccd4e370_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:068743012df5f7f0ce25e785630555ce532d50ec32a17a66e51108a5096ae38a_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:0f2106026942ca06110301ece4f911b7ea0c50461cde3a5c8710e529c7f7c4c6_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dae49f4e857b84f9bad0c3a477c43834cbea6118a719c793b00524ab19b7dc0a_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:eb5f0c7e8418bde2c4a059b8f7600f478cfbd3ff46f8f8fc407b50e8dc88691b_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:0550d8ac592cf476506a992d0d3f7beb4e6aa4414f259cda47a80e4749311537_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b19bfad20ee4fb3de2075251b3eb2c1ea6a76b68edac2c3bbd4523c0aa0346a8_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:e8e427cc5103d412b4677c3aa93912cb82a5b5db8be8d21992f4341bf404f75b_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ebe846db7b0733c85850182d709103faf3725b27b2daa3b9d08b23212dbd5cca_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:f838339b4bd024f76fead96f23892c7800ffdfb243538369bed23c4f64eef8e3_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:065492e0defff65abc0c2fb776b19506e65ff65924e39eaa4e2488e884376dea_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:0d0a2e283bcfc021884410130d3dba6b7b4edfc28223cf7a2e203c2b6b3e6a9b_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:42309d715ad9d81fd87b5e20d0ae8f41c4ec1f05f71e3b55b610ac6533d75253_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4e81294ae472aa938a644e4672b264f5a71e3935e83322c238c960cf8d440005_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-75931"
        },
        {
          "category": "external",
          "summary": "RHBZ#2521777",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2521777"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-75931",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-75931"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-75931",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-75931"
        },
        {
          "category": "external",
          "summary": "https://cna.openjsf.org/security-advisories.html",
          "url": "https://cna.openjsf.org/security-advisories.html"
        },
        {
          "category": "external",
          "summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-5jgf-p345-68v8",
          "url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-5jgf-p345-68v8"
        }
      ],
      "release_date": "2026-08-24T09:30:04.212000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-23T06:31:49+00:00",
          "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:0d78ff17f71f5f742aae872a9a15c48a5bf0baa328b85d627ae177bf2c88e3da_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:1a51f636af388a11694876bcea3acb73885479b1b7e02417b4c13c8fde93ab2a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:7aa9a1a8a24b2861178d0f64ae4593cc1668562f9844f405e05cf47e94229a09_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:e9e0770bdb543dd42aa3c3aa5014cbf19d913da8f58e4d69eb58132421137ac6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:5540377f87365b5501ec4bac45334b0fc1658635c3347505fa52fe11e6f9098f_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b2c2987a6048c3e65be46209059f78067a7d0ebdf8d4481c607a8f322696e903_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:e3ab5b8e9d1b5306ee3e8bb46d54b5b7579653117db71f6f80bf4a7f0abbc62f_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:fb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:70593"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:2fda4c6642fd343cf7bd0fe629e4d85ae95c5180b8f544c464980a7c7dde9e58_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:97a0788b5ac604ca74362198517f87499da2ec26dd449cf5fb7d6eddf28de9f6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:ada851d78ec38f12688e6a64166767ddd1c960f6099604e0abf06d18ad74519a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b307464aa7f189abb67b951542d74b1f89940412fd4d08ab89a9aac25de4fb38_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:474cf8c7500c50dfd569180570f00d9649691a8621ce34f82957e53d2ad95a66_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:667964ca0a8379a75425a90e7f1a3c109804e91b6fbc38aa9ecc72d57949925b_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:9d1fac43e376171a8666d299e4d06f50e102695266e5a8bf424886dcb7e305eb_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:ae786598501725df58ae66ce52607fb8f0c325456537cf41e55cae33ccd4e370_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:0d78ff17f71f5f742aae872a9a15c48a5bf0baa328b85d627ae177bf2c88e3da_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:1a51f636af388a11694876bcea3acb73885479b1b7e02417b4c13c8fde93ab2a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:7aa9a1a8a24b2861178d0f64ae4593cc1668562f9844f405e05cf47e94229a09_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:e9e0770bdb543dd42aa3c3aa5014cbf19d913da8f58e4d69eb58132421137ac6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:5540377f87365b5501ec4bac45334b0fc1658635c3347505fa52fe11e6f9098f_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b2c2987a6048c3e65be46209059f78067a7d0ebdf8d4481c607a8f322696e903_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:e3ab5b8e9d1b5306ee3e8bb46d54b5b7579653117db71f6f80bf4a7f0abbc62f_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:fb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:068743012df5f7f0ce25e785630555ce532d50ec32a17a66e51108a5096ae38a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:0f2106026942ca06110301ece4f911b7ea0c50461cde3a5c8710e529c7f7c4c6_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dae49f4e857b84f9bad0c3a477c43834cbea6118a719c793b00524ab19b7dc0a_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:eb5f0c7e8418bde2c4a059b8f7600f478cfbd3ff46f8f8fc407b50e8dc88691b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:0550d8ac592cf476506a992d0d3f7beb4e6aa4414f259cda47a80e4749311537_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b19bfad20ee4fb3de2075251b3eb2c1ea6a76b68edac2c3bbd4523c0aa0346a8_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:e8e427cc5103d412b4677c3aa93912cb82a5b5db8be8d21992f4341bf404f75b_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ebe846db7b0733c85850182d709103faf3725b27b2daa3b9d08b23212dbd5cca_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:f838339b4bd024f76fead96f23892c7800ffdfb243538369bed23c4f64eef8e3_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:065492e0defff65abc0c2fb776b19506e65ff65924e39eaa4e2488e884376dea_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:0d0a2e283bcfc021884410130d3dba6b7b4edfc28223cf7a2e203c2b6b3e6a9b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:42309d715ad9d81fd87b5e20d0ae8f41c4ec1f05f71e3b55b610ac6533d75253_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4e81294ae472aa938a644e4672b264f5a71e3935e83322c238c960cf8d440005_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "fast-uri: fast-uri: Host confusion via skipped IDN canonicalization"
    },
    {
      "cve": "CVE-2026-75975",
      "cwe": {
        "id": "CWE-918",
        "name": "Server-Side Request Forgery (SSRF)"
      },
      "discovery_date": "2026-08-24T10:11:05.356309+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:2fda4c6642fd343cf7bd0fe629e4d85ae95c5180b8f544c464980a7c7dde9e58_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:97a0788b5ac604ca74362198517f87499da2ec26dd449cf5fb7d6eddf28de9f6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:ada851d78ec38f12688e6a64166767ddd1c960f6099604e0abf06d18ad74519a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b307464aa7f189abb67b951542d74b1f89940412fd4d08ab89a9aac25de4fb38_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:474cf8c7500c50dfd569180570f00d9649691a8621ce34f82957e53d2ad95a66_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:667964ca0a8379a75425a90e7f1a3c109804e91b6fbc38aa9ecc72d57949925b_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:9d1fac43e376171a8666d299e4d06f50e102695266e5a8bf424886dcb7e305eb_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:ae786598501725df58ae66ce52607fb8f0c325456537cf41e55cae33ccd4e370_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:068743012df5f7f0ce25e785630555ce532d50ec32a17a66e51108a5096ae38a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:0f2106026942ca06110301ece4f911b7ea0c50461cde3a5c8710e529c7f7c4c6_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dae49f4e857b84f9bad0c3a477c43834cbea6118a719c793b00524ab19b7dc0a_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:eb5f0c7e8418bde2c4a059b8f7600f478cfbd3ff46f8f8fc407b50e8dc88691b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:0550d8ac592cf476506a992d0d3f7beb4e6aa4414f259cda47a80e4749311537_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b19bfad20ee4fb3de2075251b3eb2c1ea6a76b68edac2c3bbd4523c0aa0346a8_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:e8e427cc5103d412b4677c3aa93912cb82a5b5db8be8d21992f4341bf404f75b_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ebe846db7b0733c85850182d709103faf3725b27b2daa3b9d08b23212dbd5cca_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:f838339b4bd024f76fead96f23892c7800ffdfb243538369bed23c4f64eef8e3_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:065492e0defff65abc0c2fb776b19506e65ff65924e39eaa4e2488e884376dea_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:0d0a2e283bcfc021884410130d3dba6b7b4edfc28223cf7a2e203c2b6b3e6a9b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:42309d715ad9d81fd87b5e20d0ae8f41c4ec1f05f71e3b55b610ac6533d75253_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4e81294ae472aa938a644e4672b264f5a71e3935e83322c238c960cf8d440005_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2521779"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in fast-uri, a URI parser for Node.js. Its custom parser for bracketed IPv6 literals does not fully validate the IPv6 grammar, allowing invalid trailing text in an authority to be silently discarded. This can lead to a malformed, attacker-controlled host being normalized into a different, valid IPv6 destination, such as a local or private IPv6 target. An application normalizing untrusted URLs before outbound requests, redirects, or proxy routing could be redirected, resulting in a server-side request forgery (SSRF) and address-policy bypass.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "fast-uri: fast-uri: Server-side request forgery via malformed IPv6 normalization",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A Server-Side Request Forgery (SSRF) flaw was found in fast-uri, a URI parser for Node.js. The parser\u0027s incomplete validation of bracketed IPv6 literals allows attackers to inject malformed authority components that are silently normalized to different valid IPv6 destinations. This could allow an attacker to bypass URL allowlists or network-based access controls, potentially enabling unauthorized access to internal services, cloud metadata endpoints, or other network resources. This issue affects Red Hat products that bundle fast-uri as part of their Node.js dependencies. Fixed versions are available: fast-uri 2.4.5, 3.1.6, and 4.1.3.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:0d78ff17f71f5f742aae872a9a15c48a5bf0baa328b85d627ae177bf2c88e3da_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:1a51f636af388a11694876bcea3acb73885479b1b7e02417b4c13c8fde93ab2a_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:7aa9a1a8a24b2861178d0f64ae4593cc1668562f9844f405e05cf47e94229a09_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:e9e0770bdb543dd42aa3c3aa5014cbf19d913da8f58e4d69eb58132421137ac6_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:5540377f87365b5501ec4bac45334b0fc1658635c3347505fa52fe11e6f9098f_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b2c2987a6048c3e65be46209059f78067a7d0ebdf8d4481c607a8f322696e903_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:e3ab5b8e9d1b5306ee3e8bb46d54b5b7579653117db71f6f80bf4a7f0abbc62f_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:fb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a_amd64"
        ],
        "known_not_affected": [
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:2fda4c6642fd343cf7bd0fe629e4d85ae95c5180b8f544c464980a7c7dde9e58_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:97a0788b5ac604ca74362198517f87499da2ec26dd449cf5fb7d6eddf28de9f6_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:ada851d78ec38f12688e6a64166767ddd1c960f6099604e0abf06d18ad74519a_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b307464aa7f189abb67b951542d74b1f89940412fd4d08ab89a9aac25de4fb38_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:474cf8c7500c50dfd569180570f00d9649691a8621ce34f82957e53d2ad95a66_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:667964ca0a8379a75425a90e7f1a3c109804e91b6fbc38aa9ecc72d57949925b_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:9d1fac43e376171a8666d299e4d06f50e102695266e5a8bf424886dcb7e305eb_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:ae786598501725df58ae66ce52607fb8f0c325456537cf41e55cae33ccd4e370_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:068743012df5f7f0ce25e785630555ce532d50ec32a17a66e51108a5096ae38a_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:0f2106026942ca06110301ece4f911b7ea0c50461cde3a5c8710e529c7f7c4c6_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dae49f4e857b84f9bad0c3a477c43834cbea6118a719c793b00524ab19b7dc0a_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:eb5f0c7e8418bde2c4a059b8f7600f478cfbd3ff46f8f8fc407b50e8dc88691b_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:0550d8ac592cf476506a992d0d3f7beb4e6aa4414f259cda47a80e4749311537_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b19bfad20ee4fb3de2075251b3eb2c1ea6a76b68edac2c3bbd4523c0aa0346a8_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:e8e427cc5103d412b4677c3aa93912cb82a5b5db8be8d21992f4341bf404f75b_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ebe846db7b0733c85850182d709103faf3725b27b2daa3b9d08b23212dbd5cca_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:f838339b4bd024f76fead96f23892c7800ffdfb243538369bed23c4f64eef8e3_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:065492e0defff65abc0c2fb776b19506e65ff65924e39eaa4e2488e884376dea_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:0d0a2e283bcfc021884410130d3dba6b7b4edfc28223cf7a2e203c2b6b3e6a9b_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:42309d715ad9d81fd87b5e20d0ae8f41c4ec1f05f71e3b55b610ac6533d75253_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4e81294ae472aa938a644e4672b264f5a71e3935e83322c238c960cf8d440005_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-75975"
        },
        {
          "category": "external",
          "summary": "RHBZ#2521779",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2521779"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-75975",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-75975"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-75975",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-75975"
        },
        {
          "category": "external",
          "summary": "https://cna.openjsf.org/security-advisories.html",
          "url": "https://cna.openjsf.org/security-advisories.html"
        },
        {
          "category": "external",
          "summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-f65p-4m7j-42xc",
          "url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-f65p-4m7j-42xc"
        }
      ],
      "release_date": "2026-08-24T09:58:07.698000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-23T06:31:49+00:00",
          "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:0d78ff17f71f5f742aae872a9a15c48a5bf0baa328b85d627ae177bf2c88e3da_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:1a51f636af388a11694876bcea3acb73885479b1b7e02417b4c13c8fde93ab2a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:7aa9a1a8a24b2861178d0f64ae4593cc1668562f9844f405e05cf47e94229a09_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:e9e0770bdb543dd42aa3c3aa5014cbf19d913da8f58e4d69eb58132421137ac6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:5540377f87365b5501ec4bac45334b0fc1658635c3347505fa52fe11e6f9098f_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b2c2987a6048c3e65be46209059f78067a7d0ebdf8d4481c607a8f322696e903_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:e3ab5b8e9d1b5306ee3e8bb46d54b5b7579653117db71f6f80bf4a7f0abbc62f_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:fb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:70593"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Until updates are available, restrict the processing of user-supplied URIs to trusted sources only, implement strict allowlists for destination hosts (preferably IP-based rather than hostname-based), and apply egress filtering to prevent server-initiated connections to internal networks or cloud metadata services.",
          "product_ids": [
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:2fda4c6642fd343cf7bd0fe629e4d85ae95c5180b8f544c464980a7c7dde9e58_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:97a0788b5ac604ca74362198517f87499da2ec26dd449cf5fb7d6eddf28de9f6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:ada851d78ec38f12688e6a64166767ddd1c960f6099604e0abf06d18ad74519a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b307464aa7f189abb67b951542d74b1f89940412fd4d08ab89a9aac25de4fb38_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:474cf8c7500c50dfd569180570f00d9649691a8621ce34f82957e53d2ad95a66_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:667964ca0a8379a75425a90e7f1a3c109804e91b6fbc38aa9ecc72d57949925b_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:9d1fac43e376171a8666d299e4d06f50e102695266e5a8bf424886dcb7e305eb_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:ae786598501725df58ae66ce52607fb8f0c325456537cf41e55cae33ccd4e370_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:0d78ff17f71f5f742aae872a9a15c48a5bf0baa328b85d627ae177bf2c88e3da_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:1a51f636af388a11694876bcea3acb73885479b1b7e02417b4c13c8fde93ab2a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:7aa9a1a8a24b2861178d0f64ae4593cc1668562f9844f405e05cf47e94229a09_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:e9e0770bdb543dd42aa3c3aa5014cbf19d913da8f58e4d69eb58132421137ac6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:5540377f87365b5501ec4bac45334b0fc1658635c3347505fa52fe11e6f9098f_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b2c2987a6048c3e65be46209059f78067a7d0ebdf8d4481c607a8f322696e903_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:e3ab5b8e9d1b5306ee3e8bb46d54b5b7579653117db71f6f80bf4a7f0abbc62f_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:fb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:068743012df5f7f0ce25e785630555ce532d50ec32a17a66e51108a5096ae38a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:0f2106026942ca06110301ece4f911b7ea0c50461cde3a5c8710e529c7f7c4c6_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dae49f4e857b84f9bad0c3a477c43834cbea6118a719c793b00524ab19b7dc0a_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:eb5f0c7e8418bde2c4a059b8f7600f478cfbd3ff46f8f8fc407b50e8dc88691b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:0550d8ac592cf476506a992d0d3f7beb4e6aa4414f259cda47a80e4749311537_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b19bfad20ee4fb3de2075251b3eb2c1ea6a76b68edac2c3bbd4523c0aa0346a8_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:e8e427cc5103d412b4677c3aa93912cb82a5b5db8be8d21992f4341bf404f75b_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ebe846db7b0733c85850182d709103faf3725b27b2daa3b9d08b23212dbd5cca_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:f838339b4bd024f76fead96f23892c7800ffdfb243538369bed23c4f64eef8e3_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:065492e0defff65abc0c2fb776b19506e65ff65924e39eaa4e2488e884376dea_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:0d0a2e283bcfc021884410130d3dba6b7b4edfc28223cf7a2e203c2b6b3e6a9b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:42309d715ad9d81fd87b5e20d0ae8f41c4ec1f05f71e3b55b610ac6533d75253_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4e81294ae472aa938a644e4672b264f5a71e3935e83322c238c960cf8d440005_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:2fda4c6642fd343cf7bd0fe629e4d85ae95c5180b8f544c464980a7c7dde9e58_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:97a0788b5ac604ca74362198517f87499da2ec26dd449cf5fb7d6eddf28de9f6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:ada851d78ec38f12688e6a64166767ddd1c960f6099604e0abf06d18ad74519a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b307464aa7f189abb67b951542d74b1f89940412fd4d08ab89a9aac25de4fb38_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:474cf8c7500c50dfd569180570f00d9649691a8621ce34f82957e53d2ad95a66_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:667964ca0a8379a75425a90e7f1a3c109804e91b6fbc38aa9ecc72d57949925b_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:9d1fac43e376171a8666d299e4d06f50e102695266e5a8bf424886dcb7e305eb_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:ae786598501725df58ae66ce52607fb8f0c325456537cf41e55cae33ccd4e370_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:0d78ff17f71f5f742aae872a9a15c48a5bf0baa328b85d627ae177bf2c88e3da_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:1a51f636af388a11694876bcea3acb73885479b1b7e02417b4c13c8fde93ab2a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:7aa9a1a8a24b2861178d0f64ae4593cc1668562f9844f405e05cf47e94229a09_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:e9e0770bdb543dd42aa3c3aa5014cbf19d913da8f58e4d69eb58132421137ac6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:5540377f87365b5501ec4bac45334b0fc1658635c3347505fa52fe11e6f9098f_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b2c2987a6048c3e65be46209059f78067a7d0ebdf8d4481c607a8f322696e903_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:e3ab5b8e9d1b5306ee3e8bb46d54b5b7579653117db71f6f80bf4a7f0abbc62f_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:fb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:068743012df5f7f0ce25e785630555ce532d50ec32a17a66e51108a5096ae38a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:0f2106026942ca06110301ece4f911b7ea0c50461cde3a5c8710e529c7f7c4c6_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dae49f4e857b84f9bad0c3a477c43834cbea6118a719c793b00524ab19b7dc0a_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:eb5f0c7e8418bde2c4a059b8f7600f478cfbd3ff46f8f8fc407b50e8dc88691b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:0550d8ac592cf476506a992d0d3f7beb4e6aa4414f259cda47a80e4749311537_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b19bfad20ee4fb3de2075251b3eb2c1ea6a76b68edac2c3bbd4523c0aa0346a8_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:e8e427cc5103d412b4677c3aa93912cb82a5b5db8be8d21992f4341bf404f75b_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ebe846db7b0733c85850182d709103faf3725b27b2daa3b9d08b23212dbd5cca_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:f838339b4bd024f76fead96f23892c7800ffdfb243538369bed23c4f64eef8e3_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:065492e0defff65abc0c2fb776b19506e65ff65924e39eaa4e2488e884376dea_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:0d0a2e283bcfc021884410130d3dba6b7b4edfc28223cf7a2e203c2b6b3e6a9b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:42309d715ad9d81fd87b5e20d0ae8f41c4ec1f05f71e3b55b610ac6533d75253_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4e81294ae472aa938a644e4672b264f5a71e3935e83322c238c960cf8d440005_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "fast-uri: fast-uri: Server-side request forgery via malformed IPv6 normalization"
    },
    {
      "cve": "CVE-2026-76172",
      "cwe": {
        "id": "CWE-76",
        "name": "Improper Neutralization of Equivalent Special Elements"
      },
      "discovery_date": "2026-08-24T10:31:12.887477+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:2fda4c6642fd343cf7bd0fe629e4d85ae95c5180b8f544c464980a7c7dde9e58_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:97a0788b5ac604ca74362198517f87499da2ec26dd449cf5fb7d6eddf28de9f6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:ada851d78ec38f12688e6a64166767ddd1c960f6099604e0abf06d18ad74519a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b307464aa7f189abb67b951542d74b1f89940412fd4d08ab89a9aac25de4fb38_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:474cf8c7500c50dfd569180570f00d9649691a8621ce34f82957e53d2ad95a66_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:667964ca0a8379a75425a90e7f1a3c109804e91b6fbc38aa9ecc72d57949925b_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:9d1fac43e376171a8666d299e4d06f50e102695266e5a8bf424886dcb7e305eb_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:ae786598501725df58ae66ce52607fb8f0c325456537cf41e55cae33ccd4e370_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:068743012df5f7f0ce25e785630555ce532d50ec32a17a66e51108a5096ae38a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:0f2106026942ca06110301ece4f911b7ea0c50461cde3a5c8710e529c7f7c4c6_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dae49f4e857b84f9bad0c3a477c43834cbea6118a719c793b00524ab19b7dc0a_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:eb5f0c7e8418bde2c4a059b8f7600f478cfbd3ff46f8f8fc407b50e8dc88691b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:0550d8ac592cf476506a992d0d3f7beb4e6aa4414f259cda47a80e4749311537_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b19bfad20ee4fb3de2075251b3eb2c1ea6a76b68edac2c3bbd4523c0aa0346a8_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:e8e427cc5103d412b4677c3aa93912cb82a5b5db8be8d21992f4341bf404f75b_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ebe846db7b0733c85850182d709103faf3725b27b2daa3b9d08b23212dbd5cca_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:f838339b4bd024f76fead96f23892c7800ffdfb243538369bed23c4f64eef8e3_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:065492e0defff65abc0c2fb776b19506e65ff65924e39eaa4e2488e884376dea_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:0d0a2e283bcfc021884410130d3dba6b7b4edfc28223cf7a2e203c2b6b3e6a9b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:42309d715ad9d81fd87b5e20d0ae8f41c4ec1f05f71e3b55b610ac6533d75253_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4e81294ae472aa938a644e4672b264f5a71e3935e83322c238c960cf8d440005_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2521798"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in fast-uri, a software component used for parsing Uniform Resource Identifiers (URIs) in Node.js applications. This vulnerability arises from an issue in how fast-uri processes the scheme part of a URI, specifically when it contains special characters that are percent-encoded. An attacker can exploit this by crafting a malicious URI, causing the parser to misinterpret the host, which can lead to serious security risks. These risks include unauthorized redirection to external websites, server-side request forgery (SSRF) where the application makes unintended requests to internal or external resources, and bypassing security policies.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "fast-uri: fast-uri: URI parsing flaw enables server-side request forgery and redirects",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A host confusion vulnerability was found in fast-uri, a URI parser for Node.js. The parser runs a legacy decoding pass over the scheme component and never re-escapes the result. As a consequence, an input whose scheme carries percent-encoded slashes parses as having no authority (undefined host), yet resolving or normalizing that same input emits a network-path reference with an attacker-chosen authority. Applications that normalize or resolve untrusted URLs before a redirect check, host allowlist, or outbound request decision can be steered to an attacker-controlled domain, enabling server-side request forgery (SSRF), open redirect, or address-policy bypass. Additionally, a normalized URI in a response header can carry injected carriage return line feed (CRLF) characters, enabling HTTP response splitting attacks such as cache poisoning or session hijacking. This issue affects Red Hat products that bundle fast-uri as part of their Node.js dependencies. Fixed versions are available: fast-uri 2.4.5, 3.1.6, and 4.1.3.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:0d78ff17f71f5f742aae872a9a15c48a5bf0baa328b85d627ae177bf2c88e3da_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:1a51f636af388a11694876bcea3acb73885479b1b7e02417b4c13c8fde93ab2a_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:7aa9a1a8a24b2861178d0f64ae4593cc1668562f9844f405e05cf47e94229a09_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:e9e0770bdb543dd42aa3c3aa5014cbf19d913da8f58e4d69eb58132421137ac6_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:5540377f87365b5501ec4bac45334b0fc1658635c3347505fa52fe11e6f9098f_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b2c2987a6048c3e65be46209059f78067a7d0ebdf8d4481c607a8f322696e903_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:e3ab5b8e9d1b5306ee3e8bb46d54b5b7579653117db71f6f80bf4a7f0abbc62f_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:fb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a_amd64"
        ],
        "known_not_affected": [
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:2fda4c6642fd343cf7bd0fe629e4d85ae95c5180b8f544c464980a7c7dde9e58_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:97a0788b5ac604ca74362198517f87499da2ec26dd449cf5fb7d6eddf28de9f6_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:ada851d78ec38f12688e6a64166767ddd1c960f6099604e0abf06d18ad74519a_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b307464aa7f189abb67b951542d74b1f89940412fd4d08ab89a9aac25de4fb38_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:474cf8c7500c50dfd569180570f00d9649691a8621ce34f82957e53d2ad95a66_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:667964ca0a8379a75425a90e7f1a3c109804e91b6fbc38aa9ecc72d57949925b_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:9d1fac43e376171a8666d299e4d06f50e102695266e5a8bf424886dcb7e305eb_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:ae786598501725df58ae66ce52607fb8f0c325456537cf41e55cae33ccd4e370_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:068743012df5f7f0ce25e785630555ce532d50ec32a17a66e51108a5096ae38a_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:0f2106026942ca06110301ece4f911b7ea0c50461cde3a5c8710e529c7f7c4c6_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dae49f4e857b84f9bad0c3a477c43834cbea6118a719c793b00524ab19b7dc0a_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:eb5f0c7e8418bde2c4a059b8f7600f478cfbd3ff46f8f8fc407b50e8dc88691b_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:0550d8ac592cf476506a992d0d3f7beb4e6aa4414f259cda47a80e4749311537_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b19bfad20ee4fb3de2075251b3eb2c1ea6a76b68edac2c3bbd4523c0aa0346a8_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:e8e427cc5103d412b4677c3aa93912cb82a5b5db8be8d21992f4341bf404f75b_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ebe846db7b0733c85850182d709103faf3725b27b2daa3b9d08b23212dbd5cca_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:f838339b4bd024f76fead96f23892c7800ffdfb243538369bed23c4f64eef8e3_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:065492e0defff65abc0c2fb776b19506e65ff65924e39eaa4e2488e884376dea_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:0d0a2e283bcfc021884410130d3dba6b7b4edfc28223cf7a2e203c2b6b3e6a9b_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:42309d715ad9d81fd87b5e20d0ae8f41c4ec1f05f71e3b55b610ac6533d75253_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4e81294ae472aa938a644e4672b264f5a71e3935e83322c238c960cf8d440005_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-76172"
        },
        {
          "category": "external",
          "summary": "RHBZ#2521798",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2521798"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-76172",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-76172"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-76172",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-76172"
        },
        {
          "category": "external",
          "summary": "https://cna.openjsf.org/security-advisories.html",
          "url": "https://cna.openjsf.org/security-advisories.html"
        },
        {
          "category": "external",
          "summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-jqff-g426-hqxp",
          "url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-jqff-g426-hqxp"
        }
      ],
      "release_date": "2026-08-24T10:07:56.440000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-23T06:31:49+00:00",
          "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:0d78ff17f71f5f742aae872a9a15c48a5bf0baa328b85d627ae177bf2c88e3da_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:1a51f636af388a11694876bcea3acb73885479b1b7e02417b4c13c8fde93ab2a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:7aa9a1a8a24b2861178d0f64ae4593cc1668562f9844f405e05cf47e94229a09_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:e9e0770bdb543dd42aa3c3aa5014cbf19d913da8f58e4d69eb58132421137ac6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:5540377f87365b5501ec4bac45334b0fc1658635c3347505fa52fe11e6f9098f_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b2c2987a6048c3e65be46209059f78067a7d0ebdf8d4481c607a8f322696e903_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:e3ab5b8e9d1b5306ee3e8bb46d54b5b7579653117db71f6f80bf4a7f0abbc62f_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:fb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:70593"
        },
        {
          "category": "workaround",
          "details": "There is no mitigation available for this issue. Apply updates as they become available from Red Hat product teams.",
          "product_ids": [
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:2fda4c6642fd343cf7bd0fe629e4d85ae95c5180b8f544c464980a7c7dde9e58_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:97a0788b5ac604ca74362198517f87499da2ec26dd449cf5fb7d6eddf28de9f6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:ada851d78ec38f12688e6a64166767ddd1c960f6099604e0abf06d18ad74519a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b307464aa7f189abb67b951542d74b1f89940412fd4d08ab89a9aac25de4fb38_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:474cf8c7500c50dfd569180570f00d9649691a8621ce34f82957e53d2ad95a66_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:667964ca0a8379a75425a90e7f1a3c109804e91b6fbc38aa9ecc72d57949925b_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:9d1fac43e376171a8666d299e4d06f50e102695266e5a8bf424886dcb7e305eb_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:ae786598501725df58ae66ce52607fb8f0c325456537cf41e55cae33ccd4e370_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:0d78ff17f71f5f742aae872a9a15c48a5bf0baa328b85d627ae177bf2c88e3da_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:1a51f636af388a11694876bcea3acb73885479b1b7e02417b4c13c8fde93ab2a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:7aa9a1a8a24b2861178d0f64ae4593cc1668562f9844f405e05cf47e94229a09_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:e9e0770bdb543dd42aa3c3aa5014cbf19d913da8f58e4d69eb58132421137ac6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:5540377f87365b5501ec4bac45334b0fc1658635c3347505fa52fe11e6f9098f_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b2c2987a6048c3e65be46209059f78067a7d0ebdf8d4481c607a8f322696e903_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:e3ab5b8e9d1b5306ee3e8bb46d54b5b7579653117db71f6f80bf4a7f0abbc62f_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:fb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:068743012df5f7f0ce25e785630555ce532d50ec32a17a66e51108a5096ae38a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:0f2106026942ca06110301ece4f911b7ea0c50461cde3a5c8710e529c7f7c4c6_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dae49f4e857b84f9bad0c3a477c43834cbea6118a719c793b00524ab19b7dc0a_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:eb5f0c7e8418bde2c4a059b8f7600f478cfbd3ff46f8f8fc407b50e8dc88691b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:0550d8ac592cf476506a992d0d3f7beb4e6aa4414f259cda47a80e4749311537_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b19bfad20ee4fb3de2075251b3eb2c1ea6a76b68edac2c3bbd4523c0aa0346a8_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:e8e427cc5103d412b4677c3aa93912cb82a5b5db8be8d21992f4341bf404f75b_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ebe846db7b0733c85850182d709103faf3725b27b2daa3b9d08b23212dbd5cca_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:f838339b4bd024f76fead96f23892c7800ffdfb243538369bed23c4f64eef8e3_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:065492e0defff65abc0c2fb776b19506e65ff65924e39eaa4e2488e884376dea_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:0d0a2e283bcfc021884410130d3dba6b7b4edfc28223cf7a2e203c2b6b3e6a9b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:42309d715ad9d81fd87b5e20d0ae8f41c4ec1f05f71e3b55b610ac6533d75253_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4e81294ae472aa938a644e4672b264f5a71e3935e83322c238c960cf8d440005_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:2fda4c6642fd343cf7bd0fe629e4d85ae95c5180b8f544c464980a7c7dde9e58_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:97a0788b5ac604ca74362198517f87499da2ec26dd449cf5fb7d6eddf28de9f6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:ada851d78ec38f12688e6a64166767ddd1c960f6099604e0abf06d18ad74519a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b307464aa7f189abb67b951542d74b1f89940412fd4d08ab89a9aac25de4fb38_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:474cf8c7500c50dfd569180570f00d9649691a8621ce34f82957e53d2ad95a66_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:667964ca0a8379a75425a90e7f1a3c109804e91b6fbc38aa9ecc72d57949925b_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:9d1fac43e376171a8666d299e4d06f50e102695266e5a8bf424886dcb7e305eb_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:ae786598501725df58ae66ce52607fb8f0c325456537cf41e55cae33ccd4e370_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:0d78ff17f71f5f742aae872a9a15c48a5bf0baa328b85d627ae177bf2c88e3da_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:1a51f636af388a11694876bcea3acb73885479b1b7e02417b4c13c8fde93ab2a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:7aa9a1a8a24b2861178d0f64ae4593cc1668562f9844f405e05cf47e94229a09_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:e9e0770bdb543dd42aa3c3aa5014cbf19d913da8f58e4d69eb58132421137ac6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:5540377f87365b5501ec4bac45334b0fc1658635c3347505fa52fe11e6f9098f_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b2c2987a6048c3e65be46209059f78067a7d0ebdf8d4481c607a8f322696e903_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:e3ab5b8e9d1b5306ee3e8bb46d54b5b7579653117db71f6f80bf4a7f0abbc62f_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:fb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:068743012df5f7f0ce25e785630555ce532d50ec32a17a66e51108a5096ae38a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:0f2106026942ca06110301ece4f911b7ea0c50461cde3a5c8710e529c7f7c4c6_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dae49f4e857b84f9bad0c3a477c43834cbea6118a719c793b00524ab19b7dc0a_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:eb5f0c7e8418bde2c4a059b8f7600f478cfbd3ff46f8f8fc407b50e8dc88691b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:0550d8ac592cf476506a992d0d3f7beb4e6aa4414f259cda47a80e4749311537_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b19bfad20ee4fb3de2075251b3eb2c1ea6a76b68edac2c3bbd4523c0aa0346a8_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:e8e427cc5103d412b4677c3aa93912cb82a5b5db8be8d21992f4341bf404f75b_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ebe846db7b0733c85850182d709103faf3725b27b2daa3b9d08b23212dbd5cca_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:f838339b4bd024f76fead96f23892c7800ffdfb243538369bed23c4f64eef8e3_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:065492e0defff65abc0c2fb776b19506e65ff65924e39eaa4e2488e884376dea_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:0d0a2e283bcfc021884410130d3dba6b7b4edfc28223cf7a2e203c2b6b3e6a9b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:42309d715ad9d81fd87b5e20d0ae8f41c4ec1f05f71e3b55b610ac6533d75253_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4e81294ae472aa938a644e4672b264f5a71e3935e83322c238c960cf8d440005_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "fast-uri: fast-uri: URI parsing flaw enables server-side request forgery and redirects"
    },
    {
      "cve": "CVE-2026-84292",
      "cwe": {
        "id": "CWE-140",
        "name": "Improper Neutralization of Delimiters"
      },
      "discovery_date": "2026-09-02T20:21:15.599288+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:2fda4c6642fd343cf7bd0fe629e4d85ae95c5180b8f544c464980a7c7dde9e58_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:97a0788b5ac604ca74362198517f87499da2ec26dd449cf5fb7d6eddf28de9f6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:ada851d78ec38f12688e6a64166767ddd1c960f6099604e0abf06d18ad74519a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b307464aa7f189abb67b951542d74b1f89940412fd4d08ab89a9aac25de4fb38_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:474cf8c7500c50dfd569180570f00d9649691a8621ce34f82957e53d2ad95a66_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:667964ca0a8379a75425a90e7f1a3c109804e91b6fbc38aa9ecc72d57949925b_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:9d1fac43e376171a8666d299e4d06f50e102695266e5a8bf424886dcb7e305eb_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:ae786598501725df58ae66ce52607fb8f0c325456537cf41e55cae33ccd4e370_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:068743012df5f7f0ce25e785630555ce532d50ec32a17a66e51108a5096ae38a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:0f2106026942ca06110301ece4f911b7ea0c50461cde3a5c8710e529c7f7c4c6_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dae49f4e857b84f9bad0c3a477c43834cbea6118a719c793b00524ab19b7dc0a_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:eb5f0c7e8418bde2c4a059b8f7600f478cfbd3ff46f8f8fc407b50e8dc88691b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:0550d8ac592cf476506a992d0d3f7beb4e6aa4414f259cda47a80e4749311537_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b19bfad20ee4fb3de2075251b3eb2c1ea6a76b68edac2c3bbd4523c0aa0346a8_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:e8e427cc5103d412b4677c3aa93912cb82a5b5db8be8d21992f4341bf404f75b_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ebe846db7b0733c85850182d709103faf3725b27b2daa3b9d08b23212dbd5cca_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:f838339b4bd024f76fead96f23892c7800ffdfb243538369bed23c4f64eef8e3_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:065492e0defff65abc0c2fb776b19506e65ff65924e39eaa4e2488e884376dea_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:0d0a2e283bcfc021884410130d3dba6b7b4edfc28223cf7a2e203c2b6b3e6a9b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:42309d715ad9d81fd87b5e20d0ae8f41c4ec1f05f71e3b55b610ac6533d75253_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4e81294ae472aa938a644e4672b264f5a71e3935e83322c238c960cf8d440005_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2527747"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in fast-uri. This component improperly serializes the port component of a Uniform Resource Identifier (URI) without validating its content. A remote attacker can exploit this by crafting a malicious port value that injects authority delimiters. This manipulation can demote the intended host to user information and redirect the authority to an attacker-controlled host, leading to information disclosure as applications interpret the attacker\u0027s host as legitimate.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "fast-uri: fast-uri: Authority Injection via Unvalidated Port Serialization",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important flaw. Applications utilizing the `fast-uri` library in Red Hat environments are susceptible to authority injection if they process untrusted data as the port component of a URI. This could allow an attacker to redirect network traffic to an arbitrary host, compromising communication integrity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:0d78ff17f71f5f742aae872a9a15c48a5bf0baa328b85d627ae177bf2c88e3da_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:1a51f636af388a11694876bcea3acb73885479b1b7e02417b4c13c8fde93ab2a_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:7aa9a1a8a24b2861178d0f64ae4593cc1668562f9844f405e05cf47e94229a09_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:e9e0770bdb543dd42aa3c3aa5014cbf19d913da8f58e4d69eb58132421137ac6_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:5540377f87365b5501ec4bac45334b0fc1658635c3347505fa52fe11e6f9098f_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b2c2987a6048c3e65be46209059f78067a7d0ebdf8d4481c607a8f322696e903_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:e3ab5b8e9d1b5306ee3e8bb46d54b5b7579653117db71f6f80bf4a7f0abbc62f_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:fb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a_amd64"
        ],
        "known_not_affected": [
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:2fda4c6642fd343cf7bd0fe629e4d85ae95c5180b8f544c464980a7c7dde9e58_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:97a0788b5ac604ca74362198517f87499da2ec26dd449cf5fb7d6eddf28de9f6_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:ada851d78ec38f12688e6a64166767ddd1c960f6099604e0abf06d18ad74519a_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b307464aa7f189abb67b951542d74b1f89940412fd4d08ab89a9aac25de4fb38_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:474cf8c7500c50dfd569180570f00d9649691a8621ce34f82957e53d2ad95a66_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:667964ca0a8379a75425a90e7f1a3c109804e91b6fbc38aa9ecc72d57949925b_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:9d1fac43e376171a8666d299e4d06f50e102695266e5a8bf424886dcb7e305eb_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:ae786598501725df58ae66ce52607fb8f0c325456537cf41e55cae33ccd4e370_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:068743012df5f7f0ce25e785630555ce532d50ec32a17a66e51108a5096ae38a_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:0f2106026942ca06110301ece4f911b7ea0c50461cde3a5c8710e529c7f7c4c6_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dae49f4e857b84f9bad0c3a477c43834cbea6118a719c793b00524ab19b7dc0a_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:eb5f0c7e8418bde2c4a059b8f7600f478cfbd3ff46f8f8fc407b50e8dc88691b_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:0550d8ac592cf476506a992d0d3f7beb4e6aa4414f259cda47a80e4749311537_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b19bfad20ee4fb3de2075251b3eb2c1ea6a76b68edac2c3bbd4523c0aa0346a8_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:e8e427cc5103d412b4677c3aa93912cb82a5b5db8be8d21992f4341bf404f75b_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ebe846db7b0733c85850182d709103faf3725b27b2daa3b9d08b23212dbd5cca_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:f838339b4bd024f76fead96f23892c7800ffdfb243538369bed23c4f64eef8e3_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:065492e0defff65abc0c2fb776b19506e65ff65924e39eaa4e2488e884376dea_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:0d0a2e283bcfc021884410130d3dba6b7b4edfc28223cf7a2e203c2b6b3e6a9b_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:42309d715ad9d81fd87b5e20d0ae8f41c4ec1f05f71e3b55b610ac6533d75253_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4e81294ae472aa938a644e4672b264f5a71e3935e83322c238c960cf8d440005_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-84292"
        },
        {
          "category": "external",
          "summary": "RHBZ#2527747",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2527747"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-84292",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-84292"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84292",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84292"
        },
        {
          "category": "external",
          "summary": "https://cna.openjsf.org/security-advisories.html",
          "url": "https://cna.openjsf.org/security-advisories.html"
        },
        {
          "category": "external",
          "summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-qw65-cvwx-89v3",
          "url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-qw65-cvwx-89v3"
        }
      ],
      "release_date": "2026-09-02T20:09:51.415000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-23T06:31:49+00:00",
          "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:0d78ff17f71f5f742aae872a9a15c48a5bf0baa328b85d627ae177bf2c88e3da_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:1a51f636af388a11694876bcea3acb73885479b1b7e02417b4c13c8fde93ab2a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:7aa9a1a8a24b2861178d0f64ae4593cc1668562f9844f405e05cf47e94229a09_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:e9e0770bdb543dd42aa3c3aa5014cbf19d913da8f58e4d69eb58132421137ac6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:5540377f87365b5501ec4bac45334b0fc1658635c3347505fa52fe11e6f9098f_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b2c2987a6048c3e65be46209059f78067a7d0ebdf8d4481c607a8f322696e903_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:e3ab5b8e9d1b5306ee3e8bb46d54b5b7579653117db71f6f80bf4a7f0abbc62f_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:fb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:70593"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:2fda4c6642fd343cf7bd0fe629e4d85ae95c5180b8f544c464980a7c7dde9e58_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:97a0788b5ac604ca74362198517f87499da2ec26dd449cf5fb7d6eddf28de9f6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:ada851d78ec38f12688e6a64166767ddd1c960f6099604e0abf06d18ad74519a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b307464aa7f189abb67b951542d74b1f89940412fd4d08ab89a9aac25de4fb38_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:474cf8c7500c50dfd569180570f00d9649691a8621ce34f82957e53d2ad95a66_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:667964ca0a8379a75425a90e7f1a3c109804e91b6fbc38aa9ecc72d57949925b_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:9d1fac43e376171a8666d299e4d06f50e102695266e5a8bf424886dcb7e305eb_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:ae786598501725df58ae66ce52607fb8f0c325456537cf41e55cae33ccd4e370_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:0d78ff17f71f5f742aae872a9a15c48a5bf0baa328b85d627ae177bf2c88e3da_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:1a51f636af388a11694876bcea3acb73885479b1b7e02417b4c13c8fde93ab2a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:7aa9a1a8a24b2861178d0f64ae4593cc1668562f9844f405e05cf47e94229a09_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:e9e0770bdb543dd42aa3c3aa5014cbf19d913da8f58e4d69eb58132421137ac6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:5540377f87365b5501ec4bac45334b0fc1658635c3347505fa52fe11e6f9098f_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b2c2987a6048c3e65be46209059f78067a7d0ebdf8d4481c607a8f322696e903_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:e3ab5b8e9d1b5306ee3e8bb46d54b5b7579653117db71f6f80bf4a7f0abbc62f_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:fb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:068743012df5f7f0ce25e785630555ce532d50ec32a17a66e51108a5096ae38a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:0f2106026942ca06110301ece4f911b7ea0c50461cde3a5c8710e529c7f7c4c6_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dae49f4e857b84f9bad0c3a477c43834cbea6118a719c793b00524ab19b7dc0a_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:eb5f0c7e8418bde2c4a059b8f7600f478cfbd3ff46f8f8fc407b50e8dc88691b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:0550d8ac592cf476506a992d0d3f7beb4e6aa4414f259cda47a80e4749311537_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b19bfad20ee4fb3de2075251b3eb2c1ea6a76b68edac2c3bbd4523c0aa0346a8_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:e8e427cc5103d412b4677c3aa93912cb82a5b5db8be8d21992f4341bf404f75b_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ebe846db7b0733c85850182d709103faf3725b27b2daa3b9d08b23212dbd5cca_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:f838339b4bd024f76fead96f23892c7800ffdfb243538369bed23c4f64eef8e3_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:065492e0defff65abc0c2fb776b19506e65ff65924e39eaa4e2488e884376dea_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:0d0a2e283bcfc021884410130d3dba6b7b4edfc28223cf7a2e203c2b6b3e6a9b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:42309d715ad9d81fd87b5e20d0ae8f41c4ec1f05f71e3b55b610ac6533d75253_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4e81294ae472aa938a644e4672b264f5a71e3935e83322c238c960cf8d440005_s390x"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:2fda4c6642fd343cf7bd0fe629e4d85ae95c5180b8f544c464980a7c7dde9e58_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:97a0788b5ac604ca74362198517f87499da2ec26dd449cf5fb7d6eddf28de9f6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:ada851d78ec38f12688e6a64166767ddd1c960f6099604e0abf06d18ad74519a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b307464aa7f189abb67b951542d74b1f89940412fd4d08ab89a9aac25de4fb38_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:474cf8c7500c50dfd569180570f00d9649691a8621ce34f82957e53d2ad95a66_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:667964ca0a8379a75425a90e7f1a3c109804e91b6fbc38aa9ecc72d57949925b_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:9d1fac43e376171a8666d299e4d06f50e102695266e5a8bf424886dcb7e305eb_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:ae786598501725df58ae66ce52607fb8f0c325456537cf41e55cae33ccd4e370_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:0d78ff17f71f5f742aae872a9a15c48a5bf0baa328b85d627ae177bf2c88e3da_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:1a51f636af388a11694876bcea3acb73885479b1b7e02417b4c13c8fde93ab2a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:7aa9a1a8a24b2861178d0f64ae4593cc1668562f9844f405e05cf47e94229a09_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:e9e0770bdb543dd42aa3c3aa5014cbf19d913da8f58e4d69eb58132421137ac6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:5540377f87365b5501ec4bac45334b0fc1658635c3347505fa52fe11e6f9098f_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b2c2987a6048c3e65be46209059f78067a7d0ebdf8d4481c607a8f322696e903_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:e3ab5b8e9d1b5306ee3e8bb46d54b5b7579653117db71f6f80bf4a7f0abbc62f_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:fb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:068743012df5f7f0ce25e785630555ce532d50ec32a17a66e51108a5096ae38a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:0f2106026942ca06110301ece4f911b7ea0c50461cde3a5c8710e529c7f7c4c6_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dae49f4e857b84f9bad0c3a477c43834cbea6118a719c793b00524ab19b7dc0a_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:eb5f0c7e8418bde2c4a059b8f7600f478cfbd3ff46f8f8fc407b50e8dc88691b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:0550d8ac592cf476506a992d0d3f7beb4e6aa4414f259cda47a80e4749311537_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b19bfad20ee4fb3de2075251b3eb2c1ea6a76b68edac2c3bbd4523c0aa0346a8_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:e8e427cc5103d412b4677c3aa93912cb82a5b5db8be8d21992f4341bf404f75b_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ebe846db7b0733c85850182d709103faf3725b27b2daa3b9d08b23212dbd5cca_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:f838339b4bd024f76fead96f23892c7800ffdfb243538369bed23c4f64eef8e3_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:065492e0defff65abc0c2fb776b19506e65ff65924e39eaa4e2488e884376dea_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:0d0a2e283bcfc021884410130d3dba6b7b4edfc28223cf7a2e203c2b6b3e6a9b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:42309d715ad9d81fd87b5e20d0ae8f41c4ec1f05f71e3b55b610ac6533d75253_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4e81294ae472aa938a644e4672b264f5a71e3935e83322c238c960cf8d440005_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "fast-uri: fast-uri: Authority Injection via Unvalidated Port Serialization"
    },
    {
      "cve": "CVE-2026-84375",
      "cwe": {
        "id": "CWE-835",
        "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
      },
      "discovery_date": "2026-09-01T21:51:30.205823+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:2fda4c6642fd343cf7bd0fe629e4d85ae95c5180b8f544c464980a7c7dde9e58_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:97a0788b5ac604ca74362198517f87499da2ec26dd449cf5fb7d6eddf28de9f6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:ada851d78ec38f12688e6a64166767ddd1c960f6099604e0abf06d18ad74519a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b307464aa7f189abb67b951542d74b1f89940412fd4d08ab89a9aac25de4fb38_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:474cf8c7500c50dfd569180570f00d9649691a8621ce34f82957e53d2ad95a66_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:667964ca0a8379a75425a90e7f1a3c109804e91b6fbc38aa9ecc72d57949925b_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:9d1fac43e376171a8666d299e4d06f50e102695266e5a8bf424886dcb7e305eb_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:ae786598501725df58ae66ce52607fb8f0c325456537cf41e55cae33ccd4e370_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:068743012df5f7f0ce25e785630555ce532d50ec32a17a66e51108a5096ae38a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:0f2106026942ca06110301ece4f911b7ea0c50461cde3a5c8710e529c7f7c4c6_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dae49f4e857b84f9bad0c3a477c43834cbea6118a719c793b00524ab19b7dc0a_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:eb5f0c7e8418bde2c4a059b8f7600f478cfbd3ff46f8f8fc407b50e8dc88691b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:0550d8ac592cf476506a992d0d3f7beb4e6aa4414f259cda47a80e4749311537_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b19bfad20ee4fb3de2075251b3eb2c1ea6a76b68edac2c3bbd4523c0aa0346a8_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:e8e427cc5103d412b4677c3aa93912cb82a5b5db8be8d21992f4341bf404f75b_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ebe846db7b0733c85850182d709103faf3725b27b2daa3b9d08b23212dbd5cca_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:f838339b4bd024f76fead96f23892c7800ffdfb243538369bed23c4f64eef8e3_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:065492e0defff65abc0c2fb776b19506e65ff65924e39eaa4e2488e884376dea_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:0d0a2e283bcfc021884410130d3dba6b7b4edfc28223cf7a2e203c2b6b3e6a9b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:42309d715ad9d81fd87b5e20d0ae8f41c4ec1f05f71e3b55b610ac6533d75253_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4e81294ae472aa938a644e4672b264f5a71e3935e83322c238c960cf8d440005_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2527118"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in js-yaml, a JavaScript YAML parser. An attacker can exploit this by providing a specially crafted YAML document that causes the parser to perform excessive processing when handling merge keys with empty sources. This can lead to prolonged CPU consumption, effectively causing a denial of service (DoS) for applications that process untrusted YAML input.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "js-yaml: js-yaml: Denial of Service vulnerability in YAML parsing",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in js-yaml, affecting applications that process untrusted YAML input. The flaw allows an attacker to craft a small YAML document that, when parsed, can lead to prolonged CPU consumption due to inefficient merge key processing, potentially exhausting system resources. This is particularly relevant where applications handle external YAML data and have merge processing enabled by default.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:0d78ff17f71f5f742aae872a9a15c48a5bf0baa328b85d627ae177bf2c88e3da_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:1a51f636af388a11694876bcea3acb73885479b1b7e02417b4c13c8fde93ab2a_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:7aa9a1a8a24b2861178d0f64ae4593cc1668562f9844f405e05cf47e94229a09_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:e9e0770bdb543dd42aa3c3aa5014cbf19d913da8f58e4d69eb58132421137ac6_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:5540377f87365b5501ec4bac45334b0fc1658635c3347505fa52fe11e6f9098f_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b2c2987a6048c3e65be46209059f78067a7d0ebdf8d4481c607a8f322696e903_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:e3ab5b8e9d1b5306ee3e8bb46d54b5b7579653117db71f6f80bf4a7f0abbc62f_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:fb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a_amd64"
        ],
        "known_not_affected": [
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:2fda4c6642fd343cf7bd0fe629e4d85ae95c5180b8f544c464980a7c7dde9e58_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:97a0788b5ac604ca74362198517f87499da2ec26dd449cf5fb7d6eddf28de9f6_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:ada851d78ec38f12688e6a64166767ddd1c960f6099604e0abf06d18ad74519a_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b307464aa7f189abb67b951542d74b1f89940412fd4d08ab89a9aac25de4fb38_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:474cf8c7500c50dfd569180570f00d9649691a8621ce34f82957e53d2ad95a66_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:667964ca0a8379a75425a90e7f1a3c109804e91b6fbc38aa9ecc72d57949925b_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:9d1fac43e376171a8666d299e4d06f50e102695266e5a8bf424886dcb7e305eb_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:ae786598501725df58ae66ce52607fb8f0c325456537cf41e55cae33ccd4e370_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:068743012df5f7f0ce25e785630555ce532d50ec32a17a66e51108a5096ae38a_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:0f2106026942ca06110301ece4f911b7ea0c50461cde3a5c8710e529c7f7c4c6_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dae49f4e857b84f9bad0c3a477c43834cbea6118a719c793b00524ab19b7dc0a_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:eb5f0c7e8418bde2c4a059b8f7600f478cfbd3ff46f8f8fc407b50e8dc88691b_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:0550d8ac592cf476506a992d0d3f7beb4e6aa4414f259cda47a80e4749311537_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b19bfad20ee4fb3de2075251b3eb2c1ea6a76b68edac2c3bbd4523c0aa0346a8_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:e8e427cc5103d412b4677c3aa93912cb82a5b5db8be8d21992f4341bf404f75b_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ebe846db7b0733c85850182d709103faf3725b27b2daa3b9d08b23212dbd5cca_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:f838339b4bd024f76fead96f23892c7800ffdfb243538369bed23c4f64eef8e3_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:065492e0defff65abc0c2fb776b19506e65ff65924e39eaa4e2488e884376dea_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:0d0a2e283bcfc021884410130d3dba6b7b4edfc28223cf7a2e203c2b6b3e6a9b_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:42309d715ad9d81fd87b5e20d0ae8f41c4ec1f05f71e3b55b610ac6533d75253_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4e81294ae472aa938a644e4672b264f5a71e3935e83322c238c960cf8d440005_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-84375"
        },
        {
          "category": "external",
          "summary": "RHBZ#2527118",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2527118"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-84375",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-84375"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84375",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84375"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/commit/3485bc06ff8a0251505f44a00414d90df2466639",
          "url": "https://github.com/nodeca/js-yaml/commit/3485bc06ff8a0251505f44a00414d90df2466639"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/commit/6a8e05f9a485188ed730ac81e81ae221352ef480",
          "url": "https://github.com/nodeca/js-yaml/commit/6a8e05f9a485188ed730ac81e81ae221352ef480"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/commit/d90b6612a5a84385bdcb556c44578eac76dc0f6b",
          "url": "https://github.com/nodeca/js-yaml/commit/d90b6612a5a84385bdcb556c44578eac76dc0f6b"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/pull/797",
          "url": "https://github.com/nodeca/js-yaml/pull/797"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/releases/tag/3.15.2",
          "url": "https://github.com/nodeca/js-yaml/releases/tag/3.15.2"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/releases/tag/4.3.2",
          "url": "https://github.com/nodeca/js-yaml/releases/tag/4.3.2"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-2883-xcg3-v3hh",
          "url": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-2883-xcg3-v3hh"
        }
      ],
      "release_date": "2026-09-01T21:43:13.617000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-23T06:31:49+00:00",
          "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:0d78ff17f71f5f742aae872a9a15c48a5bf0baa328b85d627ae177bf2c88e3da_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:1a51f636af388a11694876bcea3acb73885479b1b7e02417b4c13c8fde93ab2a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:7aa9a1a8a24b2861178d0f64ae4593cc1668562f9844f405e05cf47e94229a09_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:e9e0770bdb543dd42aa3c3aa5014cbf19d913da8f58e4d69eb58132421137ac6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:5540377f87365b5501ec4bac45334b0fc1658635c3347505fa52fe11e6f9098f_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b2c2987a6048c3e65be46209059f78067a7d0ebdf8d4481c607a8f322696e903_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:e3ab5b8e9d1b5306ee3e8bb46d54b5b7579653117db71f6f80bf4a7f0abbc62f_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:fb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:70593"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:2fda4c6642fd343cf7bd0fe629e4d85ae95c5180b8f544c464980a7c7dde9e58_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:97a0788b5ac604ca74362198517f87499da2ec26dd449cf5fb7d6eddf28de9f6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:ada851d78ec38f12688e6a64166767ddd1c960f6099604e0abf06d18ad74519a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b307464aa7f189abb67b951542d74b1f89940412fd4d08ab89a9aac25de4fb38_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:474cf8c7500c50dfd569180570f00d9649691a8621ce34f82957e53d2ad95a66_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:667964ca0a8379a75425a90e7f1a3c109804e91b6fbc38aa9ecc72d57949925b_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:9d1fac43e376171a8666d299e4d06f50e102695266e5a8bf424886dcb7e305eb_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:ae786598501725df58ae66ce52607fb8f0c325456537cf41e55cae33ccd4e370_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:0d78ff17f71f5f742aae872a9a15c48a5bf0baa328b85d627ae177bf2c88e3da_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:1a51f636af388a11694876bcea3acb73885479b1b7e02417b4c13c8fde93ab2a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:7aa9a1a8a24b2861178d0f64ae4593cc1668562f9844f405e05cf47e94229a09_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:e9e0770bdb543dd42aa3c3aa5014cbf19d913da8f58e4d69eb58132421137ac6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:5540377f87365b5501ec4bac45334b0fc1658635c3347505fa52fe11e6f9098f_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b2c2987a6048c3e65be46209059f78067a7d0ebdf8d4481c607a8f322696e903_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:e3ab5b8e9d1b5306ee3e8bb46d54b5b7579653117db71f6f80bf4a7f0abbc62f_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:fb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:068743012df5f7f0ce25e785630555ce532d50ec32a17a66e51108a5096ae38a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:0f2106026942ca06110301ece4f911b7ea0c50461cde3a5c8710e529c7f7c4c6_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dae49f4e857b84f9bad0c3a477c43834cbea6118a719c793b00524ab19b7dc0a_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:eb5f0c7e8418bde2c4a059b8f7600f478cfbd3ff46f8f8fc407b50e8dc88691b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:0550d8ac592cf476506a992d0d3f7beb4e6aa4414f259cda47a80e4749311537_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b19bfad20ee4fb3de2075251b3eb2c1ea6a76b68edac2c3bbd4523c0aa0346a8_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:e8e427cc5103d412b4677c3aa93912cb82a5b5db8be8d21992f4341bf404f75b_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ebe846db7b0733c85850182d709103faf3725b27b2daa3b9d08b23212dbd5cca_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:f838339b4bd024f76fead96f23892c7800ffdfb243538369bed23c4f64eef8e3_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:065492e0defff65abc0c2fb776b19506e65ff65924e39eaa4e2488e884376dea_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:0d0a2e283bcfc021884410130d3dba6b7b4edfc28223cf7a2e203c2b6b3e6a9b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:42309d715ad9d81fd87b5e20d0ae8f41c4ec1f05f71e3b55b610ac6533d75253_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4e81294ae472aa938a644e4672b264f5a71e3935e83322c238c960cf8d440005_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "js-yaml: js-yaml: Denial of Service vulnerability in YAML parsing"
    },
    {
      "cve": "CVE-2026-84394",
      "cwe": {
        "id": "CWE-1289",
        "name": "Improper Validation of Unsafe Equivalence in Input"
      },
      "discovery_date": "2026-09-02T20:31:21.036047+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:2fda4c6642fd343cf7bd0fe629e4d85ae95c5180b8f544c464980a7c7dde9e58_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:97a0788b5ac604ca74362198517f87499da2ec26dd449cf5fb7d6eddf28de9f6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:ada851d78ec38f12688e6a64166767ddd1c960f6099604e0abf06d18ad74519a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b307464aa7f189abb67b951542d74b1f89940412fd4d08ab89a9aac25de4fb38_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:474cf8c7500c50dfd569180570f00d9649691a8621ce34f82957e53d2ad95a66_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:667964ca0a8379a75425a90e7f1a3c109804e91b6fbc38aa9ecc72d57949925b_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:9d1fac43e376171a8666d299e4d06f50e102695266e5a8bf424886dcb7e305eb_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:ae786598501725df58ae66ce52607fb8f0c325456537cf41e55cae33ccd4e370_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:068743012df5f7f0ce25e785630555ce532d50ec32a17a66e51108a5096ae38a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:0f2106026942ca06110301ece4f911b7ea0c50461cde3a5c8710e529c7f7c4c6_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dae49f4e857b84f9bad0c3a477c43834cbea6118a719c793b00524ab19b7dc0a_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:eb5f0c7e8418bde2c4a059b8f7600f478cfbd3ff46f8f8fc407b50e8dc88691b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:0550d8ac592cf476506a992d0d3f7beb4e6aa4414f259cda47a80e4749311537_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b19bfad20ee4fb3de2075251b3eb2c1ea6a76b68edac2c3bbd4523c0aa0346a8_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:e8e427cc5103d412b4677c3aa93912cb82a5b5db8be8d21992f4341bf404f75b_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ebe846db7b0733c85850182d709103faf3725b27b2daa3b9d08b23212dbd5cca_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:f838339b4bd024f76fead96f23892c7800ffdfb243538369bed23c4f64eef8e3_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:065492e0defff65abc0c2fb776b19506e65ff65924e39eaa4e2488e884376dea_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:0d0a2e283bcfc021884410130d3dba6b7b4edfc28223cf7a2e203c2b6b3e6a9b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:42309d715ad9d81fd87b5e20d0ae8f41c4ec1f05f71e3b55b610ac6533d75253_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4e81294ae472aa938a644e4672b264f5a71e3935e83322c238c960cf8d440005_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2527756"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in fast-uri. The library incorrectly processes Uniform Resource Identifier (URI) hosts containing unbalanced brackets, leading to a discrepancy in how the host is parsed by fast-uri compared to other HTTP clients. This host confusion can allow an attacker to bypass security policies, such as Server-Side Request Forgery (SSRF) denylists or redirect allowlists, by causing an application to evaluate its policy against an incorrect host string. This could result in unintended network requests or access to unauthorized resources.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "fast-uri: fast-uri: Host confusion via unbalanced URI brackets can bypass security policies",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue is rated Moderate because successful exploitation requires a specific configuration where fast-uri handles security checks but a different client resolves the URL, enabling security policy bypasses without direct code execution. This affects fast-uri versions 2.4.5, 3.1.6, and 4.1.3 (fixed in 2.4.6, 3.1.7, and 4.1.4).",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:0d78ff17f71f5f742aae872a9a15c48a5bf0baa328b85d627ae177bf2c88e3da_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:1a51f636af388a11694876bcea3acb73885479b1b7e02417b4c13c8fde93ab2a_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:7aa9a1a8a24b2861178d0f64ae4593cc1668562f9844f405e05cf47e94229a09_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:e9e0770bdb543dd42aa3c3aa5014cbf19d913da8f58e4d69eb58132421137ac6_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:5540377f87365b5501ec4bac45334b0fc1658635c3347505fa52fe11e6f9098f_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b2c2987a6048c3e65be46209059f78067a7d0ebdf8d4481c607a8f322696e903_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:e3ab5b8e9d1b5306ee3e8bb46d54b5b7579653117db71f6f80bf4a7f0abbc62f_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:fb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a_amd64"
        ],
        "known_not_affected": [
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:2fda4c6642fd343cf7bd0fe629e4d85ae95c5180b8f544c464980a7c7dde9e58_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:97a0788b5ac604ca74362198517f87499da2ec26dd449cf5fb7d6eddf28de9f6_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:ada851d78ec38f12688e6a64166767ddd1c960f6099604e0abf06d18ad74519a_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b307464aa7f189abb67b951542d74b1f89940412fd4d08ab89a9aac25de4fb38_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:474cf8c7500c50dfd569180570f00d9649691a8621ce34f82957e53d2ad95a66_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:667964ca0a8379a75425a90e7f1a3c109804e91b6fbc38aa9ecc72d57949925b_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:9d1fac43e376171a8666d299e4d06f50e102695266e5a8bf424886dcb7e305eb_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:ae786598501725df58ae66ce52607fb8f0c325456537cf41e55cae33ccd4e370_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:068743012df5f7f0ce25e785630555ce532d50ec32a17a66e51108a5096ae38a_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:0f2106026942ca06110301ece4f911b7ea0c50461cde3a5c8710e529c7f7c4c6_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dae49f4e857b84f9bad0c3a477c43834cbea6118a719c793b00524ab19b7dc0a_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:eb5f0c7e8418bde2c4a059b8f7600f478cfbd3ff46f8f8fc407b50e8dc88691b_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:0550d8ac592cf476506a992d0d3f7beb4e6aa4414f259cda47a80e4749311537_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b19bfad20ee4fb3de2075251b3eb2c1ea6a76b68edac2c3bbd4523c0aa0346a8_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:e8e427cc5103d412b4677c3aa93912cb82a5b5db8be8d21992f4341bf404f75b_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ebe846db7b0733c85850182d709103faf3725b27b2daa3b9d08b23212dbd5cca_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:f838339b4bd024f76fead96f23892c7800ffdfb243538369bed23c4f64eef8e3_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:065492e0defff65abc0c2fb776b19506e65ff65924e39eaa4e2488e884376dea_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:0d0a2e283bcfc021884410130d3dba6b7b4edfc28223cf7a2e203c2b6b3e6a9b_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:42309d715ad9d81fd87b5e20d0ae8f41c4ec1f05f71e3b55b610ac6533d75253_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4e81294ae472aa938a644e4672b264f5a71e3935e83322c238c960cf8d440005_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-84394"
        },
        {
          "category": "external",
          "summary": "RHBZ#2527756",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2527756"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-84394",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-84394"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84394",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84394"
        },
        {
          "category": "external",
          "summary": "https://cna.openjsf.org/security-advisories.html",
          "url": "https://cna.openjsf.org/security-advisories.html"
        },
        {
          "category": "external",
          "summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-58mr-gqgx-xq4g",
          "url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-58mr-gqgx-xq4g"
        }
      ],
      "release_date": "2026-09-02T20:25:35.399000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-23T06:31:49+00:00",
          "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:0d78ff17f71f5f742aae872a9a15c48a5bf0baa328b85d627ae177bf2c88e3da_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:1a51f636af388a11694876bcea3acb73885479b1b7e02417b4c13c8fde93ab2a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:7aa9a1a8a24b2861178d0f64ae4593cc1668562f9844f405e05cf47e94229a09_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:e9e0770bdb543dd42aa3c3aa5014cbf19d913da8f58e4d69eb58132421137ac6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:5540377f87365b5501ec4bac45334b0fc1658635c3347505fa52fe11e6f9098f_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b2c2987a6048c3e65be46209059f78067a7d0ebdf8d4481c607a8f322696e903_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:e3ab5b8e9d1b5306ee3e8bb46d54b5b7579653117db71f6f80bf4a7f0abbc62f_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:fb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:70593"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:2fda4c6642fd343cf7bd0fe629e4d85ae95c5180b8f544c464980a7c7dde9e58_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:97a0788b5ac604ca74362198517f87499da2ec26dd449cf5fb7d6eddf28de9f6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:ada851d78ec38f12688e6a64166767ddd1c960f6099604e0abf06d18ad74519a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b307464aa7f189abb67b951542d74b1f89940412fd4d08ab89a9aac25de4fb38_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:474cf8c7500c50dfd569180570f00d9649691a8621ce34f82957e53d2ad95a66_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:667964ca0a8379a75425a90e7f1a3c109804e91b6fbc38aa9ecc72d57949925b_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:9d1fac43e376171a8666d299e4d06f50e102695266e5a8bf424886dcb7e305eb_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:ae786598501725df58ae66ce52607fb8f0c325456537cf41e55cae33ccd4e370_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:0d78ff17f71f5f742aae872a9a15c48a5bf0baa328b85d627ae177bf2c88e3da_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:1a51f636af388a11694876bcea3acb73885479b1b7e02417b4c13c8fde93ab2a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:7aa9a1a8a24b2861178d0f64ae4593cc1668562f9844f405e05cf47e94229a09_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:e9e0770bdb543dd42aa3c3aa5014cbf19d913da8f58e4d69eb58132421137ac6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:5540377f87365b5501ec4bac45334b0fc1658635c3347505fa52fe11e6f9098f_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b2c2987a6048c3e65be46209059f78067a7d0ebdf8d4481c607a8f322696e903_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:e3ab5b8e9d1b5306ee3e8bb46d54b5b7579653117db71f6f80bf4a7f0abbc62f_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:fb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:068743012df5f7f0ce25e785630555ce532d50ec32a17a66e51108a5096ae38a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:0f2106026942ca06110301ece4f911b7ea0c50461cde3a5c8710e529c7f7c4c6_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dae49f4e857b84f9bad0c3a477c43834cbea6118a719c793b00524ab19b7dc0a_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:eb5f0c7e8418bde2c4a059b8f7600f478cfbd3ff46f8f8fc407b50e8dc88691b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:0550d8ac592cf476506a992d0d3f7beb4e6aa4414f259cda47a80e4749311537_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b19bfad20ee4fb3de2075251b3eb2c1ea6a76b68edac2c3bbd4523c0aa0346a8_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:e8e427cc5103d412b4677c3aa93912cb82a5b5db8be8d21992f4341bf404f75b_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ebe846db7b0733c85850182d709103faf3725b27b2daa3b9d08b23212dbd5cca_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:f838339b4bd024f76fead96f23892c7800ffdfb243538369bed23c4f64eef8e3_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:065492e0defff65abc0c2fb776b19506e65ff65924e39eaa4e2488e884376dea_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:0d0a2e283bcfc021884410130d3dba6b7b4edfc28223cf7a2e203c2b6b3e6a9b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:42309d715ad9d81fd87b5e20d0ae8f41c4ec1f05f71e3b55b610ac6533d75253_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4e81294ae472aa938a644e4672b264f5a71e3935e83322c238c960cf8d440005_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "fast-uri: fast-uri: Host confusion via unbalanced URI brackets can bypass security policies"
    },
    {
      "cve": "CVE-2026-84445",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-09-14T16:22:17.356407+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:474cf8c7500c50dfd569180570f00d9649691a8621ce34f82957e53d2ad95a66_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:667964ca0a8379a75425a90e7f1a3c109804e91b6fbc38aa9ecc72d57949925b_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:9d1fac43e376171a8666d299e4d06f50e102695266e5a8bf424886dcb7e305eb_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:ae786598501725df58ae66ce52607fb8f0c325456537cf41e55cae33ccd4e370_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:0d78ff17f71f5f742aae872a9a15c48a5bf0baa328b85d627ae177bf2c88e3da_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:1a51f636af388a11694876bcea3acb73885479b1b7e02417b4c13c8fde93ab2a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:7aa9a1a8a24b2861178d0f64ae4593cc1668562f9844f405e05cf47e94229a09_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:e9e0770bdb543dd42aa3c3aa5014cbf19d913da8f58e4d69eb58132421137ac6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:5540377f87365b5501ec4bac45334b0fc1658635c3347505fa52fe11e6f9098f_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b2c2987a6048c3e65be46209059f78067a7d0ebdf8d4481c607a8f322696e903_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:e3ab5b8e9d1b5306ee3e8bb46d54b5b7579653117db71f6f80bf4a7f0abbc62f_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:fb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:068743012df5f7f0ce25e785630555ce532d50ec32a17a66e51108a5096ae38a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:0f2106026942ca06110301ece4f911b7ea0c50461cde3a5c8710e529c7f7c4c6_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dae49f4e857b84f9bad0c3a477c43834cbea6118a719c793b00524ab19b7dc0a_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:eb5f0c7e8418bde2c4a059b8f7600f478cfbd3ff46f8f8fc407b50e8dc88691b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:0550d8ac592cf476506a992d0d3f7beb4e6aa4414f259cda47a80e4749311537_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b19bfad20ee4fb3de2075251b3eb2c1ea6a76b68edac2c3bbd4523c0aa0346a8_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:e8e427cc5103d412b4677c3aa93912cb82a5b5db8be8d21992f4341bf404f75b_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ebe846db7b0733c85850182d709103faf3725b27b2daa3b9d08b23212dbd5cca_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:f838339b4bd024f76fead96f23892c7800ffdfb243538369bed23c4f64eef8e3_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:065492e0defff65abc0c2fb776b19506e65ff65924e39eaa4e2488e884376dea_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:0d0a2e283bcfc021884410130d3dba6b7b4edfc28223cf7a2e203c2b6b3e6a9b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:42309d715ad9d81fd87b5e20d0ae8f41c4ec1f05f71e3b55b610ac6533d75253_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4e81294ae472aa938a644e4672b264f5a71e3935e83322c238c960cf8d440005_s390x"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2533175"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in gRPC-Go. Servers created with xds.NewGRPCServer() can be exploited by a remote client sending a malformed RPC request that lacks the required :authority or Host headers. This can trigger an index-out-of-bounds panic, leading to the termination of the entire server process and a Denial of Service (DoS). In some deployments, this attack can be unauthenticated.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:2fda4c6642fd343cf7bd0fe629e4d85ae95c5180b8f544c464980a7c7dde9e58_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:97a0788b5ac604ca74362198517f87499da2ec26dd449cf5fb7d6eddf28de9f6_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:ada851d78ec38f12688e6a64166767ddd1c960f6099604e0abf06d18ad74519a_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b307464aa7f189abb67b951542d74b1f89940412fd4d08ab89a9aac25de4fb38_arm64"
        ],
        "known_not_affected": [
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:474cf8c7500c50dfd569180570f00d9649691a8621ce34f82957e53d2ad95a66_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:667964ca0a8379a75425a90e7f1a3c109804e91b6fbc38aa9ecc72d57949925b_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:9d1fac43e376171a8666d299e4d06f50e102695266e5a8bf424886dcb7e305eb_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:ae786598501725df58ae66ce52607fb8f0c325456537cf41e55cae33ccd4e370_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:0d78ff17f71f5f742aae872a9a15c48a5bf0baa328b85d627ae177bf2c88e3da_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:1a51f636af388a11694876bcea3acb73885479b1b7e02417b4c13c8fde93ab2a_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:7aa9a1a8a24b2861178d0f64ae4593cc1668562f9844f405e05cf47e94229a09_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:e9e0770bdb543dd42aa3c3aa5014cbf19d913da8f58e4d69eb58132421137ac6_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:5540377f87365b5501ec4bac45334b0fc1658635c3347505fa52fe11e6f9098f_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b2c2987a6048c3e65be46209059f78067a7d0ebdf8d4481c607a8f322696e903_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:e3ab5b8e9d1b5306ee3e8bb46d54b5b7579653117db71f6f80bf4a7f0abbc62f_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:fb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:068743012df5f7f0ce25e785630555ce532d50ec32a17a66e51108a5096ae38a_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:0f2106026942ca06110301ece4f911b7ea0c50461cde3a5c8710e529c7f7c4c6_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dae49f4e857b84f9bad0c3a477c43834cbea6118a719c793b00524ab19b7dc0a_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:eb5f0c7e8418bde2c4a059b8f7600f478cfbd3ff46f8f8fc407b50e8dc88691b_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:0550d8ac592cf476506a992d0d3f7beb4e6aa4414f259cda47a80e4749311537_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b19bfad20ee4fb3de2075251b3eb2c1ea6a76b68edac2c3bbd4523c0aa0346a8_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:e8e427cc5103d412b4677c3aa93912cb82a5b5db8be8d21992f4341bf404f75b_s390x",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ebe846db7b0733c85850182d709103faf3725b27b2daa3b9d08b23212dbd5cca_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:f838339b4bd024f76fead96f23892c7800ffdfb243538369bed23c4f64eef8e3_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:065492e0defff65abc0c2fb776b19506e65ff65924e39eaa4e2488e884376dea_arm64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:0d0a2e283bcfc021884410130d3dba6b7b4edfc28223cf7a2e203c2b6b3e6a9b_amd64",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:42309d715ad9d81fd87b5e20d0ae8f41c4ec1f05f71e3b55b610ac6533d75253_ppc64le",
          "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4e81294ae472aa938a644e4672b264f5a71e3935e83322c238c960cf8d440005_s390x"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-84445"
        },
        {
          "category": "external",
          "summary": "RHBZ#2533175",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2533175"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-84445",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-84445"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84445",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84445"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/commit/3822494d8ea03b992c089fd2a195f041762fffb7",
          "url": "https://github.com/grpc/grpc-go/commit/3822494d8ea03b992c089fd2a195f041762fffb7"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/commit/8668b69c167df908b6b3666dcbf40992b9e932a4",
          "url": "https://github.com/grpc/grpc-go/commit/8668b69c167df908b6b3666dcbf40992b9e932a4"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/commit/93e31b48545e2a8aaeb6e06b47fb249f94e6297f",
          "url": "https://github.com/grpc/grpc-go/commit/93e31b48545e2a8aaeb6e06b47fb249f94e6297f"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/issues/9354",
          "url": "https://github.com/grpc/grpc-go/issues/9354"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/pull/9365",
          "url": "https://github.com/grpc/grpc-go/pull/9365"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/pull/9366",
          "url": "https://github.com/grpc/grpc-go/pull/9366"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/pull/9367",
          "url": "https://github.com/grpc/grpc-go/pull/9367"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/releases/tag/v1.82.2",
          "url": "https://github.com/grpc/grpc-go/releases/tag/v1.82.2"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/releases/tag/v1.83.2",
          "url": "https://github.com/grpc/grpc-go/releases/tag/v1.83.2"
        },
        {
          "category": "external",
          "summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-2v4p-qf9q-27wj",
          "url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-2v4p-qf9q-27wj"
        }
      ],
      "release_date": "2026-09-14T16:11:41.401000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-23T06:31:49+00:00",
          "details": "For details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:2fda4c6642fd343cf7bd0fe629e4d85ae95c5180b8f544c464980a7c7dde9e58_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:97a0788b5ac604ca74362198517f87499da2ec26dd449cf5fb7d6eddf28de9f6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:ada851d78ec38f12688e6a64166767ddd1c960f6099604e0abf06d18ad74519a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b307464aa7f189abb67b951542d74b1f89940412fd4d08ab89a9aac25de4fb38_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:70593"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:2fda4c6642fd343cf7bd0fe629e4d85ae95c5180b8f544c464980a7c7dde9e58_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:97a0788b5ac604ca74362198517f87499da2ec26dd449cf5fb7d6eddf28de9f6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:ada851d78ec38f12688e6a64166767ddd1c960f6099604e0abf06d18ad74519a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-cli-rhel9@sha256:b307464aa7f189abb67b951542d74b1f89940412fd4d08ab89a9aac25de4fb38_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:474cf8c7500c50dfd569180570f00d9649691a8621ce34f82957e53d2ad95a66_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:667964ca0a8379a75425a90e7f1a3c109804e91b6fbc38aa9ecc72d57949925b_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:9d1fac43e376171a8666d299e4d06f50e102695266e5a8bf424886dcb7e305eb_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf4-rhel9@sha256:ae786598501725df58ae66ce52607fb8f0c325456537cf41e55cae33ccd4e370_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:0d78ff17f71f5f742aae872a9a15c48a5bf0baa328b85d627ae177bf2c88e3da_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:1a51f636af388a11694876bcea3acb73885479b1b7e02417b4c13c8fde93ab2a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:7aa9a1a8a24b2861178d0f64ae4593cc1668562f9844f405e05cf47e94229a09_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-pf5-rhel9@sha256:e9e0770bdb543dd42aa3c3aa5014cbf19d913da8f58e4d69eb58132421137ac6_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:5540377f87365b5501ec4bac45334b0fc1658635c3347505fa52fe11e6f9098f_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:b2c2987a6048c3e65be46209059f78067a7d0ebdf8d4481c607a8f322696e903_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:e3ab5b8e9d1b5306ee3e8bb46d54b5b7579653117db71f6f80bf4a7f0abbc62f_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-console-plugin-rhel9@sha256:fb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:068743012df5f7f0ce25e785630555ce532d50ec32a17a66e51108a5096ae38a_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:0f2106026942ca06110301ece4f911b7ea0c50461cde3a5c8710e529c7f7c4c6_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:dae49f4e857b84f9bad0c3a477c43834cbea6118a719c793b00524ab19b7dc0a_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-ebpf-agent-rhel9@sha256:eb5f0c7e8418bde2c4a059b8f7600f478cfbd3ff46f8f8fc407b50e8dc88691b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:0550d8ac592cf476506a992d0d3f7beb4e6aa4414f259cda47a80e4749311537_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b19bfad20ee4fb3de2075251b3eb2c1ea6a76b68edac2c3bbd4523c0aa0346a8_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:e8e427cc5103d412b4677c3aa93912cb82a5b5db8be8d21992f4341bf404f75b_s390x",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ebe846db7b0733c85850182d709103faf3725b27b2daa3b9d08b23212dbd5cca_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-operator-bundle@sha256:f838339b4bd024f76fead96f23892c7800ffdfb243538369bed23c4f64eef8e3_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:065492e0defff65abc0c2fb776b19506e65ff65924e39eaa4e2488e884376dea_arm64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:0d0a2e283bcfc021884410130d3dba6b7b4edfc28223cf7a2e203c2b6b3e6a9b_amd64",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:42309d715ad9d81fd87b5e20d0ae8f41c4ec1f05f71e3b55b610ac6533d75253_ppc64le",
            "Network Observability (NETOBSERV) 1.12.3:registry.redhat.io/network-observability/network-observability-rhel9-operator@sha256:4e81294ae472aa938a644e4672b264f5a71e3935e83322c238c960cf8d440005_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.